oauth2orize-facebook

Facebook token exchange middleware for OAuth2 server toolkit oauth2orize.

Inspired from oauth2orize's built-in exchanger password.

Installation

npm i oauth2orize-facebook -S

Usage

Before using this package, you should enable the 'Require App Secret' option in the advanced settings of your Facebook app. You also must provide the app secret by exporting it

export FB_APP_SECRET={your Facebook app secret}

or by adding FB_APP_SECRET={your Facebook app secret} to your .env file.

Then, you can have fun

var oauth2orize = require('oauth2orize');
var oauth2orizeFacebook = require('oauth2orize-facebook');

var server = oauth2orize.createServer();

server.exchange(oauth2orizeFacebook(['email', 'first_name', 'last_name'], function (client, profile, scope, cb) {
  // Get access token from client and Facebook profile information.
  var accessToken = 'access token';

  // Refresh token could be returned if it is supported by your OAuth2 server.
  // If not available, just pass `null` as argument.
  var refreshToken = 'optional refresh token';

  // Additional parameters to return in response. Pass `null` if not available.
  var params = {
    'welcome_to': 'our OAuth2 server',
    'glad_to': 'meet you'
  };

  cb(null, accessToken, refreshToken, params);
  // Or just `cb(null, accessToken);` is enough.
}));

License

MIT licensed.