Hacker News new | ask | show | jobs
by Nextgrid 2231 days ago
Facebook Login can be implemented with plain oAuth without sending any data to Facebook until the user actually uses the FB Login feature.

Regardless of which SDK features they use the SDK calls out to Facebook with the device's fingerprint and a persistent UUID every time the app is launched or brought back into foreground.

1 comments

Would 100% suggest going the basic OAuth route with FB, and not relying on their SDKs whenever possible. Been bit by Friday-afternoon-PST deployments that wreak havoc until work starts Monday too many times :/
Did anyone make any replacement login-only libraries for Facebook?
It's not exactly what you want, but just yesterday I made AccountsJS work with Facebook OAuth.[1]

I was glad today when watching this newsline, to have avoided the facebook SDK.

I think OAuth is usually better because every major provider has some version of it and so you basically can implement them all the same or at least in a really similar fashion.

1. http://www.accountsjs.com/