73 lines
1.9 KiB
JavaScript
73 lines
1.9 KiB
JavaScript
// Helper functions for accessing the Facebook Graph API.
|
|
const httpsRequest = require('./httpsRequest');
|
|
var Parse = require('parse/node').Parse;
|
|
const crypto = require('crypto');
|
|
|
|
function getAppSecretPath(authData, options = {}) {
|
|
const appSecret = options.appSecret;
|
|
if (!appSecret) {
|
|
return '';
|
|
}
|
|
const appsecret_proof = crypto
|
|
.createHmac('sha256', appSecret)
|
|
.update(authData.access_token)
|
|
.digest('hex');
|
|
|
|
return `&appsecret_proof=${appsecret_proof}`;
|
|
}
|
|
|
|
// Returns a promise that fulfills iff this user id is valid.
|
|
function validateAuthData(authData, options) {
|
|
return graphRequest(
|
|
'me?fields=id&access_token=' +
|
|
authData.access_token +
|
|
getAppSecretPath(authData, options)
|
|
).then(data => {
|
|
if (
|
|
(data && data.id == authData.id) ||
|
|
(process.env.TESTING && authData.id === 'test')
|
|
) {
|
|
return;
|
|
}
|
|
throw new Parse.Error(
|
|
Parse.Error.OBJECT_NOT_FOUND,
|
|
'Facebook auth is invalid for this user.'
|
|
);
|
|
});
|
|
}
|
|
|
|
// Returns a promise that fulfills iff this app id is valid.
|
|
function validateAppId(appIds, authData, options) {
|
|
var access_token = authData.access_token;
|
|
if (process.env.TESTING && access_token === 'test') {
|
|
return Promise.resolve();
|
|
}
|
|
if (!appIds.length) {
|
|
throw new Parse.Error(
|
|
Parse.Error.OBJECT_NOT_FOUND,
|
|
'Facebook auth is not configured.'
|
|
);
|
|
}
|
|
return graphRequest(
|
|
'app?access_token=' + access_token + getAppSecretPath(authData, options)
|
|
).then(data => {
|
|
if (data && appIds.indexOf(data.id) != -1) {
|
|
return;
|
|
}
|
|
throw new Parse.Error(
|
|
Parse.Error.OBJECT_NOT_FOUND,
|
|
'Facebook auth is invalid for this user.'
|
|
);
|
|
});
|
|
}
|
|
|
|
// A promisey wrapper for FB graph requests.
|
|
function graphRequest(path) {
|
|
return httpsRequest.get('https://graph.facebook.com/' + path);
|
|
}
|
|
|
|
module.exports = {
|
|
validateAppId: validateAppId,
|
|
validateAuthData: validateAuthData,
|
|
};
|