Hi,
I have an Iphone app. I am using facebook connect when for user authentication. I am sending score and fbuser Id to my web server. How can I validation this user valid or not?
Thanks
A:
If your user login to FB using your app, then you have his valid fb id.
If you get users' friends using FBConnect, then you also have theirs fb id. Then they are also valid, so what are you scared of when all the FB ID is returned from FB API?
vodkhang
2010-09-07 09:00:47
anyone can send another userId with zero score in my application user list.
onder
2010-09-07 09:05:51
You mean you allow people to input their user id manually? If user cannot touch the user id, all are from fb, how can anyone can send it?
vodkhang
2010-09-07 09:33:09
no, there are two different platform : iphone, webservis. User use iphone for facebook connect than user can send score to webservice. But some people can send userId and score with another application to webservice.
onder
2010-09-07 09:50:41
ok, now I get your idea. Let me think
vodkhang
2010-09-07 09:59:04
then you want to validate if the fb uid is a valid fb id or you want to check if the fb uid is coming from the correct person, not anyone who sends you a friend'fb uid?
vodkhang
2010-09-07 10:01:08
If you want the first, then one of the easiest way is to call graph API: https://graph.facebook.com/ID . If the ID exists then some data will be returned
vodkhang
2010-09-07 10:01:46