CS6320:  SW Engineering of Web Based Systems

 

Facebook: User does not allow authentication

*****read Facebook website here for latest *****************

What happens when the user does not allow the app to have the permissions your requested:

Suppose request your program sent was to:

REQUEST sent

https://www.facebook.com/dialog/oauth?client_id=YOUR_APP_ID
     &redirect_uri=YOUR_CANVAS_PAGE&scope=email,read_stream

If the user presses Don't Allow, your app is not authorized. The OAuth Dialog will redirect (via HTTP 302) the user's browser to the URL you passed in the redirect_uri parameter with the following error information:

 

OUTPUT sent to your program from Facebook

http://YOUR_CANVAS_PAGE?error_reason=user_denied&
     error=access_denied&error_description=The+user+denied+your+request.


What do you do now?

  • OPTION 1: Have your code operate without this custom information.
  • OPTION 2: Deny the user the use of your application
  • OPTION 3: Hmmm.....offer some incentive or reduce set of functionalities if they do a sub-set of the permissions? You come up with an option that works for you.
© Lynne Grewe