ansaurus

Question

Facebook page acquire full screen after clicking on iframe

Answer 1

A:

Not sure about that, but I think the "popup" form factor is for real popups, you should try the "page" form factor here

Claude Vedovini 2010-07-08 08:10:23

i have tried page but it will open in a whole new page

Hunt 2010-07-08 08:16:11

do you mean it doesn't initially open in the iframe or when you click on the authorize button it takes over the page as well?

Claude Vedovini 2010-07-08 08:33:59

i it opening in a iframe window successfully but when a user clicks inside an iframe , the whole page get loaded with a facebook page.

Hunt 2010-07-08 09:05:40

hum, on second though this sounds rather logical. There's a redirect at the end of the process and I you cannot redirect _inside_ an iframe. I am afraid you will have to use a real popup :/

Claude Vedovini 2010-07-08 09:17:20

Answer 2

A:

This is a security mechanism; the user has little way to tell whether your IFRAME is really Facebook, or you presenting something that looks like Facebook. With a full URL at the top, this becomes much more transparent (yes, they should implement SSL with a valid cert to truly prove this, but hey).

Martin Eve 2010-07-08 08:43:53

ok so is there any workaround for it ?

Hunt 2010-07-08 08:56:39

The workaround is to redirect to the Facebook authentication page specifying the page you want to return to when done ase per: http://developers.facebook.com/docs/guides/web

Martin Eve 2010-07-08 10:21:04

Answer 3

A:

I just ran into this myself. The solution I used?

Javascript Authentication

And the rough steps

// trigger this any way you want
window.open(
    'https://graph.facebook.com/oauth/authorize?client_id=CLIENT_ID&amp;display=popup&amp;scope=PERM_LIST&amp;redirect_url=http://example.com/oauth_redirect'
  , 'authorize'
  , 'width=600,height=350'
);

This displays the authentication window in a popup. Now, the next bit what you do with the redirect url (in my example, http://example.com/oauth_redirect)

The access_token parameter in the URL holds the OAuth token - so retrieve that and do whatever you need to with it (store in a cookie, whatever). And then use JS to control what happens to the popup and opener

<script type="text/javascript">

// Perhaps load the next page?
window.opener.location = 'http://example.com/canvas'

// close the popup
window.close();

</script>

See this relevant forum thread as well.

Peter Bailey 2010-07-08 17:51:19

Answer 4

A:

Login in iframe is not allowed for security reasons. Use a popup instead. You can do what Peter suggested with window.open or use the JS SDK, for example: http://fbrell.com/auth/all-in-one.

daaku 2010-07-12 00:28:50

ansaurus

tags:

views:

answers:

Facebook page acquire full screen after clicking on iframe

related questions