Avoid Single Sign-on for Facebook - iphone

We'd built an iPad app which is mostly played by children on there parents iPad. Now we would like to implement the ability to share a photo on Facebook. The only difficulty is that we don't want the children to automatically post the photo on their parents wall. Therefor the children has to be forced to login with their own account.
We can achieve as described here:
Disable Single Sign On (SSO) in Facebook IOS SDK
Only Facebook seems to reject apps which are not using SSO as described here:
http://facebook.stackoverflow.com/questions/10856344/appcenter-rejection-due-to-sso
Are there any other ways of avoiding SSO? Or is Facebook only rejecting the app if it is in the App Center?
NOTE: It seems all the Facebook apps are added to the App Center?

There is a bigger flaw in your application than just SSO. You're forgetting that Children are not allowed to have Facebook Accounts. The minimum age for Facebook registration is 13, so unless your app is targeted to teenagers and older, you should scrap Facebook integration altogether.

Related

Facebook App Types

This is a pretty basic question. I wasn't clear after a bit of research what types of Facebook apps one could create.
I think one kind is a web app which gets incorporated into Facebook web pages. I think it kind of works like an iFrame. Am I understanding this correctly?
I'm not clear about iOS and Android apps. Are they separate mobile apps that use Facebook authentication OR do they get incorporated into Facebook's own mobile app?
Canvas (resp. Facebook Web Games, as it is now known, after Facebook decided to name a new, more directly end-user facing feature "Canvas" for marketing reasons) and Page Tab apps are the ones where the content is shown on Facebook in an iframe. You can use the API & FB login on external websites, too.
Native Android and iOS apps are individual, stand-alone apps, they are not integrated into the official Facebook app; but are using the Facebook platform -
login & API - to create a "social experience" for their users. Distribution of those apps to the end user usually works via the official Play/App store; in addition to the review Facebook requires, Google and Apple might require additional review before your app gets in there.

Facebook App Center Game that doesnt use FB API?

Is it possible to submit my 3D WebGL HTML5 / Facebook Canvas app to the App Center, even though it does not use the Facebook API? It isn't integrated with Facebook in any way, other than, being embedded in..
https://apps.facebook.com/flappy-wheels/
..from a Dropbox-hosted URL, if that even counts as a technical "Facebook integration" - which I doubt, as no API usage or Facebook signup or login required to even play it.
I keep on trying to submit it for App Center review but it insists to think I'm using the FB API when I'm not. Does this mean usage of the FB API is absolutely required for App Center submission? What if I dont want my app logging in to people's Facebook accounts? What if I don't want it accessing their personal information, or posting for them, or any of that jank? What if I just want it to be a game to simply be played embedded in a FB app URL, with no actual FB integration or interaction? Can that not be put on the App Center?
It thinks I need 3 permissions, one of which is logging in to people's accounts, I think these 3 permissions are put there in settings by default, how do I removed those permissions from my app settings, as those permissions listed aren't being used in my game, as it isn't using any FB permissions?
A smaller question on the side, what is the "tagline"? Like, it is the keywords / searchable tags, right? I'm used to them being called just "tags" and not a "tagline" so just to be sure I know what it is.
Thank you so much for any help or suggestions!
Yes you can always submit the html5 game on facebook canvas but for App Centre listing its necessary. Also using dropbox, github hosted sited will have less server resources allocted to them and hence high load time - i recommend to use any other hosting services out their, but remember https is a must.
Tagline is like a punch line for any product just go on the same theme.

Facebook native mobile application and mobile browser sharing session

I have a website which allows login via facebook functionality and displays photos from facebook.
While accessing from a mobile browser I would like the website to automatically login(when the click on FB login button, without entering username and password) if the user is already logged in via the native FB application (iOS or andriod). It seems to be that I can do that by building a native iOS or android application and use facebook single sign on feature. Is it possible to do that without having the user install anything on their mobile device?
That is not possible.
Auto-Login relies on auth tokens that will be granted to a website or mobile app after a user approves an app. For security reasons, those tokens are tight to the cause they were issued for. Particularly, web tokens and mobile tokens are not interchangeable.
So you could build a native mobile app to get a "native token", but even if you would manage to (cookie-)inject it into a browser view, your website's backend couldn't use it.
More generally, you're raising an issue even facebook can't solve: Say you are using a facebook mobile app and logged in there. If you open facebook's web version on that very same phone, you'll have to log in there again. The root cause is the same as with above. Specifically, any native app is uncapable of setting arbitrary auth cookies into the OS browser. I personally believe this restriction will not fall, because it would have a large security impact - just imagine how any app could set (and possibly get) cookies for any website.
If they've never logged in facebook from their Mobile, how will your website ever know them ?
Is it possible to do that without having the user install anything on their mobile device?
Like PC's, users in a mobile device need to login in their phone in facebook's website before being eligible to login "automatically" to your website. When I say automatically, I mean they still have to go with the first time process of "Do you authorize this app/website to do X things on your account". That message is inevitable when using facebook's api on the web.
Hope this answers your question.
Is it possible to do that without having the user install anything on
their mobile device?
No this would not be possible. You need to have a native or hybrid app (phonegapped etc) to make it work. Mobile web apps run in a browser sandbox and without native code interface - you cannot get to the native SSO of FB on your mobile device
Did you have a look at this facebook page ? I'm not sure what you ask is possible, as basav said, but maybe you'll have some clues there.

facebook games policy change [duplicate]

This question already has an answer here:
Closed 10 years ago.
Possible Duplicate:
Facebook says my app will be impacted by breaking changes
Because of the policy changes that will be changed on december 5th (https://developers.facebook.com/blog/post/2012/09/05/platform-updates--operation-developer-love/) I have received a notice from facebook with the following alert:
Your desktop web game hosted primarily off Facebook currently accesses user connections when authenticating and/or requests additional permissions beyond age, email, and publishing permissions. This is no longer allowed per Facebook Platform Policy I.13a:
I have no idea what i'm doing that i'm not supposed to. I run an app on facebook (apps.facebook.com/...) so how can my app be "hosted primarily off Facebook.com" ?
So i have 2 questions.
How can i make sure that my app is now up to date. The information in the mail is very limited, so i can only guess what i'm doing wrong.
Secondly: Is there any way to test that my app is now okay, since facebook will put restrictions on it on december 5th
Does your app on Facebook (aka Canvas app), implement an iframe inside the iframe provided by apps.facebook.com ?
The iframe provided by Facebook has id="iframe_canvas".
If you implement an iframe of your own inside the FB iframe with id="iframe_canvas", then you might get this message.
You choices are to remove your iframe, or make sure you originate all your API calls from the FB iframe (not from your iframe).

Facebook applications and WP7

I need to perform facebook post into the user wall from wp7 (but without using the nice built-in ShareLinkTask of mango, please don't ask me why, its a requirement).
So, lets say I must do it as I was in Wp7 before mango, the only way available I found, is based on building a facebook application and using that applicationId with the facebook sdk.
It works but I need to use an ad-hoc or a company account to create the app, I was not able to do both, it seems that comapny account cannot create apps, ad-hoc account are prohibited.
Is there a way to create a facebook app withouth using a personal account ?
Is it really necessary to create a facebook app to make a wp7 app post to facebook (without using the ShareLinkTask of mango).
thanks to all
There is no other way to post on somebody's wall. You have to use the SDK and to register your app on Facebook because the user has to explicitly authorize your applications to post on his wall.
Even if you post a message from the built-in Windows Phone features, you'll see on Facebook that the message has been posted with the application Windows Phone. And you can retrieve the settings of that application in your facebook account settings: