{"action":"created","issue":{"url":"https://api.github.com/repos/python-social-auth/social-core/issues/190","repository_url":"https://api.github.com/repos/python-social-auth/social-core","labels_url":"https://api.github.com/repos/python-social-auth/social-core/issues/190/labels{/name}","comments_url":"https://api.github.com/repos/python-social-auth/social-core/issues/190/comments","events_url":"https://api.github.com/repos/python-social-auth/social-core/issues/190/events","html_url":"https://github.com/python-social-auth/social-core/issues/190","id":296091717,"number":190,"title":"Facebook redirect uri","user":{"login":"MounirMesselmeni","id":1055731,"avatar_url":"https://avatars0.githubusercontent.com/u/1055731?v=4","gravatar_id":"","url":"https://api.github.com/users/MounirMesselmeni","html_url":"https://github.com/MounirMesselmeni","followers_url":"https://api.github.com/users/MounirMesselmeni/followers","following_url":"https://api.github.com/users/MounirMesselmeni/following{/other_user}","gists_url":"https://api.github.com/users/MounirMesselmeni/gists{/gist_id}","starred_url":"https://api.github.com/users/MounirMesselmeni/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MounirMesselmeni/subscriptions","organizations_url":"https://api.github.com/users/MounirMesselmeni/orgs","repos_url":"https://api.github.com/users/MounirMesselmeni/repos","events_url":"https://api.github.com/users/MounirMesselmeni/events{/privacy}","received_events_url":"https://api.github.com/users/MounirMesselmeni/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-02-10T10:47:26Z","updated_at":"2018-02-20T17:01:31Z","closed_at":"2018-02-20T17:01:31Z","author_association":"NONE","body":"Hello,\r\n\r\n```\r\nFacebook will enforce redirect uri for apps:\r\nIn 35 days, we're making a security update to Facebook Login that will invalidate calls from URIs not listed in the Valid OAuth redirect URIs field of your Facebook Login settings.\r\n\r\nThis update comes in response to malicious activity we saw on our platform, and we want to protect your app or website by requiring a new strict mode for redirect URIs. Take action now to ensure your redirect traffic continues to work.\r\n```\r\n\r\nIf I define mywebsite.com/complete/facebook/ and enforce redirect uri it will fail because of query params ?redirect_state=something\r\nI've seen that it's possible to pass back query params but via a state parameter https://developers.facebook.com/docs/facebook-login/manually-build-a-login-flow/#logindialog\r\n\r\nIs this already supported and not mentioned in the documentation or should it be implemented?\r\n\r\nThank you"},"comment":{"url":"https://api.github.com/repos/python-social-auth/social-core/issues/comments/367045137","html_url":"https://github.com/python-social-auth/social-core/issues/190#issuecomment-367045137","issue_url":"https://api.github.com/repos/python-social-auth/social-core/issues/190","id":367045137,"user":{"login":"omab","id":91022,"avatar_url":"https://avatars0.githubusercontent.com/u/91022?v=4","gravatar_id":"","url":"https://api.github.com/users/omab","html_url":"https://github.com/omab","followers_url":"https://api.github.com/users/omab/followers","following_url":"https://api.github.com/users/omab/following{/other_user}","gists_url":"https://api.github.com/users/omab/gists{/gist_id}","starred_url":"https://api.github.com/users/omab/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/omab/subscriptions","organizations_url":"https://api.github.com/users/omab/orgs","repos_url":"https://api.github.com/users/omab/repos","events_url":"https://api.github.com/users/omab/events{/privacy}","received_events_url":"https://api.github.com/users/omab/received_events","type":"User","site_admin":false},"created_at":"2018-02-20T17:01:31Z","updated_at":"2018-02-20T17:01:31Z","author_association":"CONTRIBUTOR","body":"The facebook backend already [disables the redirct state sending](https://github.com/python-social-auth/social-core/blob/c607873521eb1efe180631e842d94a134359f8b7/social_core/backends/facebook.py#L23), so that won't affect the redirect value. As for other parameters, the lib won't send anything that's not related to the auth flow, only exception is the redirect state, but it's disabled already."}}
{"actor":{"display_login":"omab"}}