外部登录不适用于 MVC 4 web 应用程序中的 facebook

Question

我注意到在 Facebook GRAPH API 于 2017 年 3 月 27 日到期后，我的 Facebook 应用程序不再提供对我的 Web 应用程序的访问权限。主要是OAuthWebSecurity无法从facebook图表API获取登录状态，我已经经历了bug report in the developers group. But they didn't provide a solution. I got a solution which is provided for NopCommerce in this 。但是我没有得到 MVC 4.

的任何完美解决方案

我已经完成了 link 在 MVC 5 中接近他们系统的地方，但是我需要 MVC4 中的解决方案并提到 OWIN 不支持 MVC4 在 VS 2012 那么我该如何解决这个问题。自上一周以来，我一直遇到这个问题。

主要异常发生在这段代码

AuthenticationResult result = OAuthWebSecurity.VerifyAuthentication(Url.Action("ExternalLoginCallback", new { ReturnUrl = returnUrl }));

它 returning IsSuccessful 为假，其余参数也为空。

我研究过 Facebook 已经将 API string 的 return 类型更改为 JSON 那么如何开发我的代码来获得那些 JSON 完全正确。谢谢。

更新： 这个问题仍然没有答案。任何人都在这里帮助我。

Answer 1

你检查过这个解决方案了吗？

“我们运行在 2017 年 3 月 27 日星期一遇到了同样的问题，当时 Facebook 停止了对其 Graph API v2.2 的支持。我们还使用了最初通过 Nuget 安装的 DotNetOpenAuth。源代码可在下面的 link

编辑（2017 年 4 月 18 日）：您好，今天早上我遇到了以下 link，它解决了我的问题。试试看，让我知道:)

https://github.com/DotNetOpenAuth/DotNetOpenAuth/issues/397

代码由用户提供'adoconnection'。这是 link 中的第 4 个 post。

我正在为这个抓狂。哈哈

此致！

Answer 2

根据我必须给你一个解决方案。在 MVC4 每个人写下他们的 AppID 和 SecurityCode。由于 facebook GRAPH API 的更改，以前的链接已损坏。因此每个人都需要更改 RegisterFacebookClient 类。但是这个class在.Net库中是一个密封的class，所以任何人都不能扩展或覆盖它。结果我们需要使用wrapperclass。让我们考虑我的 Wrapper class 是 FacebookClientV2Dot3 因此我的 class 将是

using System;
using System.Collections.Generic;
using System.Collections.Specialized;
using System.IO;
using System.Linq;
using System.Net;
using System.Text;
using System.Web;
using DotNetOpenAuth.AspNet.Clients;
using Newtonsoft.Json;

public class FacebookClientV2Dot3 : OAuth2Client
{
    #region Constants and Fields

    /// <summary>
    /// The authorization endpoint.
    /// </summary>
    private const string AuthorizationEndpoint = "https://www.facebook.com/dialog/oauth";

    /// <summary>
    /// The token endpoint.
    /// </summary>
    private const string TokenEndpoint = "https://graph.facebook.com/oauth/access_token";

    /// <summary>
    /// The user info endpoint.
    /// </summary>
    private const string UserInfoEndpoint = "https://graph.facebook.com/me";

    /// <summary>
    /// The app id.
    /// </summary>
    private readonly string _appId;

    /// <summary>
    /// The app secret.
    /// </summary>
    private readonly string _appSecret;

    /// <summary>
    /// The requested scopes.
    /// </summary>
    private readonly string[] _requestedScopes;

    #endregion

    /// <summary>
    /// Creates a new Facebook OAuth2 client, requesting the default "email" scope.
    /// </summary>
    /// <param name="appId">The Facebook App Id</param>
    /// <param name="appSecret">The Facebook App Secret</param>
    public FacebookClient(string appId, string appSecret)
        : this(appId, appSecret, new[] { "email" }) { }

    /// <summary>
    /// Creates a new Facebook OAuth2 client.
    /// </summary>
    /// <param name="appId">The Facebook App Id</param>
    /// <param name="appSecret">The Facebook App Secret</param>
    /// <param name="requestedScopes">One or more requested scopes, passed without the base URI.</param>
    public FacebookClient(string appId, string appSecret, params string[] requestedScopes)
        : base("facebook")
    {
        if (string.IsNullOrWhiteSpace(appId))
            throw new ArgumentNullException("appId");

        if (string.IsNullOrWhiteSpace(appSecret))
            throw new ArgumentNullException("appSecret");

        if (requestedScopes == null)
            throw new ArgumentNullException("requestedScopes");

        if (requestedScopes.Length == 0)
            throw new ArgumentException("One or more scopes must be requested.", "requestedScopes");

        _appId = appId;
        _appSecret = appSecret;
        _requestedScopes = requestedScopes;
    }

    protected override Uri GetServiceLoginUrl(Uri returnUrl)
    {
        var state = string.IsNullOrEmpty(returnUrl.Query) ? string.Empty : returnUrl.Query.Substring(1);

        return BuildUri(AuthorizationEndpoint, new NameValueCollection
                {
                    { "client_id", _appId },
                    { "scope", string.Join(" ", _requestedScopes) },
                    { "redirect_uri", returnUrl.GetLeftPart(UriPartial.Path) },
                    { "state", state },
                });
    }

    protected override IDictionary<string, string> GetUserData(string accessToken)
    {
        var uri = BuildUri(UserInfoEndpoint, new NameValueCollection { { "access_token", accessToken } });

        var webRequest = (HttpWebRequest)WebRequest.Create(uri);

        using (var webResponse = webRequest.GetResponse())
        using (var stream = webResponse.GetResponseStream())
        {
            if (stream == null)
                return null;

            using (var textReader = new StreamReader(stream))
            {
                var json = textReader.ReadToEnd();
                var extraData = JsonConvert.DeserializeObject<Dictionary<string, object>>(json);
                var data = extraData.ToDictionary(x => x.Key, x => x.Value.ToString());

                data.Add("picture", string.Format("https://graph.facebook.com/{0}/picture", data["id"]));

                return data;
            }
        }
    }

    protected override string QueryAccessToken(Uri returnUrl, string authorizationCode)
    {
        var uri = BuildUri(TokenEndpoint, new NameValueCollection
                {
                    { "code", authorizationCode },
                    { "client_id", _appId },
                    { "client_secret", _appSecret },
                    { "redirect_uri", returnUrl.GetLeftPart(UriPartial.Path) },
                });

        var webRequest = (HttpWebRequest)WebRequest.Create(uri);
        string accessToken = null;
        HttpWebResponse response = (HttpWebResponse)webRequest.GetResponse();

        // handle response from FB 
        // this will not be a url with params like the first request to get the 'code'
        Encoding rEncoding = Encoding.GetEncoding(response.CharacterSet);

        using (StreamReader sr = new StreamReader(response.GetResponseStream(), rEncoding))
        {
            var serializer = new System.Web.Script.Serialization.JavaScriptSerializer();
            var jsonObject = serializer.DeserializeObject(sr.ReadToEnd());
            var jConvert = JsonConvert.DeserializeObject(JsonConvert.SerializeObject(jsonObject));

            Dictionary<string, object> desirializedJsonObject = JsonConvert.DeserializeObject<Dictionary<string, object>>(jConvert.ToString());
            accessToken = desirializedJsonObject["access_token"].ToString();
        }
        return accessToken;
    }

    private static Uri BuildUri(string baseUri, NameValueCollection queryParameters)
    {
        var keyValuePairs = queryParameters.AllKeys.Select(k => HttpUtility.UrlEncode(k) + "=" + HttpUtility.UrlEncode(queryParameters[k]));
        var qs = String.Join("&", keyValuePairs);

        var builder = new UriBuilder(baseUri) { Query = qs };
        return builder.Uri;
    }

    /// <summary>
    /// Facebook works best when return data be packed into a "state" parameter.
    /// This should be called before verifying the request, so that the url is rewritten to support this.
    /// </summary>
    public static void RewriteRequest()
    {
        var ctx = HttpContext.Current;

        var stateString = HttpUtility.UrlDecode(ctx.Request.QueryString["state"]);
        if (stateString == null || !stateString.Contains("__provider__=facebook"))
            return;

        var q = HttpUtility.ParseQueryString(stateString);
        q.Add(ctx.Request.QueryString);
        q.Remove("state");

        ctx.RewritePath(ctx.Request.Path + "?" + q);
    }
}

看这里，我已经用较新版本的链接替换了所有 API 链接。

现在你需要修改你的

AuthConfig

只需使用包装器class

OAuthWebSecurity.RegisterClient(new FacebookClientV2Dot3("AppID", "HassedPassword"));

然后一切成功。您的 Facebook 登录将恢复到以前的状态。

然而，您可能会遇到关于这个新 API 而不是以前的 API 的新问题，问题是 IP Whitelisting。像这样image。希望你只需要这个。编码愉快。

外部登录不适用于 MVC 4 web 应用程序中的 facebook

External login is not working for facebook in MVC 4 webapplication

facebook

asp.net-mvc-4

facebook-graph-api

facebook-apps

facebook-authentication