Oauth2 - Unsafe JavaScript attempt to access frame with URL

Question

I am using the following code to rendered the facebook login button

<div id="facebook-login">
  <script>
    FB.init({ 
      appId:"appid", cookie:true, 
      status:true, xfbml:true
    });
    FB.Event.subscribe("auth.login", function(response) {
      window.location = "http://xxx"; // redirect if user has logged in
    });
  </script>
  <fb:login-button perms="publish_stream"><?php print 'Login with Facebook'; ?></fb:login-button>
</div>

But it no longer works today, and I think it is related to the oauth2.

So I tried to update the code as suggested in Facebook's developer docs.

The new code:

<div id="facebook-login">
  <script>
    window.fbAsyncInit = function() {
      FB.init({ 
        appId:"appid", cookie:true, 
        status:true, xfbml:true, oauth:true, xfbml: true, channelUrl: '//mydomain/channel.php'
      });
      FB.Event.subscribe("auth.login", function(response) {
        window.location = "http://xxx"; // redirect if user has logged in
      });
    };
    // Load the SDK Asynchronously
    (function(d){
       var js, id = 'facebook-jssdk'; if (d.getElementById(id)) {return;}
       js = d.createElement('script'); js.id = id; js.async = true;
       js.src = "//connect.facebook.net/en_US/all.js";
       d.getElementsByTagName('head')[0].appendChild(js);
     }(document));
  </script>
  <fb:login-button scope="publish_stream"><?php print 'Login with Facebook'; ?></fb:login-button>
</div>

Now whenever I click the facebook login button, the chrome console keeps throwing the following error Unsafe JavaScript attempt to access frame with URL https://www.facebook.com/login.php?...

I think it is a js cross domain issue, but I have setup the channel url. Any idea on how to solve this problem?

Thanks.

Regards, Kit

Leandro Ferrero · Accepted Answer · 2011-12-15 00:43:00Z

2

Be sure to replace the code to the new oAuth 2.0

param => scope
response.session => response.authResponse
response.session.access_token => response.authResponse.accessToken
FB.getSession().uid => FB.getAuthResponse().userID

link: https://developers.facebook.com/blog/post/525/

edited Dec 15, 2011 at 0:43

Leandro Ferrero

1435 bronze badges

answered Dec 14, 2011 at 21:33

Zamus

211 bronze badge

Sign up to request clarification or add additional context in comments.

Comments

Yuen Ying Kit · Accepted Answer · 2012-01-17 08:25:56Z

0

Finally i found the answer. the get_facebook_cookie() no longer works for OAuth 2.0. we need the facebook php-sdk as mentioned in Facebook Developers – Facebook for Websites

You can also tried the example in Facebook Javascript SDK – A Simple Login Page with OAuth 2.0

answered Jan 17, 2012 at 8:25

Yuen Ying Kit

311 silver badge3 bronze badges

Collectives™ on Stack Overflow

Oauth2 - Unsafe JavaScript attempt to access frame with URL

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related