facebook-oauth

Java Facebook OAuth App

This article shows how to use Facebook to implement an authentication in a custom Java application and get Facebook profile data such as name, email and gender.This article shows how to use Facebook to implement an authentication in a custom Java application and get Facebook profile data such as name, email and gender.

Facebook Web Application

As the very first step of the app making , logging to 
https://developers.facebook.com/

Then you have to provide your normal Facebook credentials to register as a Facebook developer.





Once you clicked “Get Started” you asked to create a new app ID,


Give it a Display Name you want and email to contact you.






Once you click “Create App”, it will proceed to app settings.

Facebook  Application Settings

We need to specify the application callback url in the FB settings. This will be used by the FB server on authentication to hand back control to our application.




There is a lot of discussion about how Facebook will directly call our “localhost” as it will not be visible to it. Facebook will never call the application URL directly. A request will be sent back as response to the client browser with the callback url. The browser does the request. A sequence diagram given below explains the flow of control in authentication using Facebook OAuth.

Facebook OAuth Authentication Sequence Flow




  1. On access of an url or in welcome page the Facebook Login button is shown. The user will click the FB button to login into the Java web application. On click of that button a Facebook URL will be invoked.
  2. Facebook will validate the application ID and then will redirect to its login page.
  1. User will enter the FB login credentials and submit the form.
  2. Facebook will validate the credentials and then redirect back to the browser with a request to forward to the redirect_url. Redirect_url is the URL in our application which will take care of further processing.
  3. Browser will call the redirect url.
  4. Redirect URL page will again call the Facebook to request for access_token.
  5. Facebook on validation success will respond back with access_token.
  6. Redirect URL page will again call the Facebook to request for user data by sending the access_token.
  7. Facebook on validating the access_token will respond back with user data requested.
  8. Redirect URL page will forward to a page showing user data in the client browser.

Facebook Login page





Below you can see the source code of the application's login page.

<%@page import="com.javapapers.java.social.facebook.FBConnection"%>
<%@ page language="java" contentType="text/html; charset=ISO-8859-1"
 pageEncoding="ISO-8859-1"%>
<%
 FBConnection fbConnection = new FBConnection();
%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>Java Facebook Login</title>
</head>
<body style="text-align: center; margin: 0 auto;">
 <div
  style="margin: 0 auto; background-image: url(./img/fbloginbckgrnd.jpg); height: 360px; width: 610px;">
  <a href="<%=fbConnection.getFBAuthUrl()%>"> <img
   style="margin-top: 138px;" src="./img/facebookloginbutton.png" />
  </a>
 </div>

Application Redirect URL


Following is the page the Facebook issues a redirect request to the browser.

package com.javapapers.java.social.facebook;

import java.io.IOException;
import java.util.Map;

import javax.servlet.ServletException;
import javax.servlet.ServletOutputStream;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

public class MainMenu extends HttpServlet {

 private static final long serialVersionUID = 1L;
 private String code="";

 public void service(HttpServletRequest req, HttpServletResponse res)
   throws ServletException, IOException {  
  code = req.getParameter("code");
  if (code == null || code.equals("")) {
   throw new RuntimeException(
     "ERROR: Didn't get code parameter in callback.");
  }
  FBConnection fbConnection = new FBConnection();
  String accessToken = fbConnection.getAccessToken(code);

  FBGraph fbGraph = new FBGraph(accessToken);
  String graph = fbGraph.getFBGraph();
  Map<String, String> fbProfileData = fbGraph.getGraphData(graph);
  ServletOutputStream out = res.getOutputStream();
  out.println("<h1>Facebook Login using Java</h1>");
  out.println("<h2>Application Main Menu</h2>");
  out.println("<div>Welcome "+fbProfileData.get("first_name"));
  out.println("<div>Your Email: "+fbProfileData.get("email"));
  out.println("<div>You are "+fbProfileData.get("gender"));  
 }

}

Facebook Get Access Token

package com.javapapers.java.social.facebook;

import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.UnsupportedEncodingException;
import java.net.MalformedURLException;
import java.net.URL;
import java.net.URLConnection;
import java.net.URLEncoder;

public class FBConnection {
 public static final String FB_APP_ID = "234231262685378";
 public static final String FB_APP_SECRET = "y2a73dede3n49uid13502f5ab8cdt390";
 public static final String REDIRECT_URI = "http://localhost:8080/Facebook_Login/fbhome";

 static String accessToken = "";

 public String getFBAuthUrl() {
  String fbLoginUrl = "";
  try {
   fbLoginUrl = "http://www.facebook.com/dialog/oauth?" + "client_id="
     + FBConnection.FB_APP_ID + "&redirect_uri="
     + URLEncoder.encode(FBConnection.REDIRECT_URI, "UTF-8")
     + "&scope=email";
  } catch (UnsupportedEncodingException e) {
   e.printStackTrace();
  }
  return fbLoginUrl;
 }

 public String getFBGraphUrl(String code) {
  String fbGraphUrl = "";
  try {
   fbGraphUrl = "https://graph.facebook.com/oauth/access_token?"
     + "client_id=" + FBConnection.FB_APP_ID + "&redirect_uri="
     + URLEncoder.encode(FBConnection.REDIRECT_URI, "UTF-8")
     + "&client_secret=" + FB_APP_SECRET + "&code=" + code;
  } catch (UnsupportedEncodingException e) {
   e.printStackTrace();
  }
  return fbGraphUrl;
 }

 public String getAccessToken(String code) {
  if ("".equals(accessToken)) {
   URL fbGraphURL;
   try {
    fbGraphURL = new URL(getFBGraphUrl(code));
   } catch (MalformedURLException e) {
    e.printStackTrace();
    throw new RuntimeException("Invalid code received " + e);
   }
   URLConnection fbConnection;
   StringBuffer b = null;
   try {
    fbConnection = fbGraphURL.openConnection();
    BufferedReader in;
    in = new BufferedReader(new InputStreamReader(
      fbConnection.getInputStream()));
    String inputLine;
    b = new StringBuffer();
    while ((inputLine = in.readLine()) != null)
     b.append(inputLine + "\n");
    in.close();
   } catch (IOException e) {
    e.printStackTrace();
    throw new RuntimeException("Unable to connect with Facebook "
      + e);
   }

   accessToken = b.toString();
   if (accessToken.startsWith("{")) {
    throw new RuntimeException("ERROR: Access Token Invalid: "
      + accessToken);
   }
  }
  return accessToken;
 }
}

Access Facebook Graph Profile Data

package com.javapapers.java.social.facebook;

import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.net.URL;
import java.net.URLConnection;
import java.util.HashMap;
import java.util.Map;

import org.json.JSONException;
import org.json.JSONObject;

public class FBGraph {
 private String accessToken;

 public FBGraph(String accessToken) {
  this.accessToken = accessToken;
 }

 public String getFBGraph() {
  String graph = null;
  try {

   String g = "https://graph.facebook.com/me?" + accessToken;
   URL u = new URL(g);
   URLConnection c = u.openConnection();
   BufferedReader in = new BufferedReader(new InputStreamReader(
     c.getInputStream()));
   String inputLine;
   StringBuffer b = new StringBuffer();
   while ((inputLine = in.readLine()) != null)
    b.append(inputLine + "\n");
   in.close();
   graph = b.toString();
   System.out.println(graph);
  } catch (Exception e) {
   e.printStackTrace();
   throw new RuntimeException("ERROR in getting FB graph data. " + e);
  }
  return graph;
 }

 public Map getGraphData(String fbGraph) {
  Map fbProfile = new HashMap();
  try {
   JSONObject json = new JSONObject(fbGraph);
   fbProfile.put("id", json.getString("id"));
   fbProfile.put("first_name", json.getString("first_name"));
   if (json.has("email"))
    fbProfile.put("email", json.getString("email"));
   if (json.has("gender"))
    fbProfile.put("gender", json.getString("gender"));
  } catch (JSONException e) {
   e.printStackTrace();
   throw new RuntimeException("ERROR in parsing FB graph data. " + e);
  }
  return fbProfile;
 }
}

Facebook Authentication Success and Profile Data




Download Application project source here Click to proceed

































































Comments

Post a Comment

Popular posts from this blog

The Secure Socket Tunneling Protocol

Image
The Secure Socket Tunneling Protocol This segment depends on a prerelease adaptation of Windows Server 2008. All data in this is liable to change. Virtual private system (VPN) bolster in Windows XP and Windows Server 2003 enables you to interface with your private intranet over the Internet, similarly as though your PC was connected to a neighborhood Ethernet port. Nonetheless, the VPN conventions in Windows XP and Windows Server 2003 don't work for some firewall arrangements what's more, for some circuitous arrangements, for example, when your PC is behind a Network Address Translator (NAT) or Web intermediary server—in which the movement for VPN associations is being blocked. To determine these challenges, Windows Server® 2008 and Windows Vista Service Pack 1 incorporate help for the new Secure Socket Tunneling Protocol (SSTP). VPN Access Problems In Windows® XP and Windows Server 2003, the VPN conventions that empower remote access associations with an intranet
Read more

Fake WAP

Image
Fake WAP There are a horde of things out there that goes under the general name 'hacking.' But what precisely are these demonstrations and what is the completely most effortless one for programmers to finish? This is a stealth assault, similar to a lethal ninja, known as a phony remote access point (Fake WAP). You may likewise know it as a 'man in the center' assault. Programmers can do this effectively enough, taking your information covertly with the goal that you're unaware. More regrettable yet, you'll HELP them do it! A VPN is your vital component to ensuring this doesn't transpire, regardless of the possibility that you do fall into their trap. As a reward, I get the chance to add pictures of ninjas to this post and it absolutely bodes well. What is a fake wireless access point This is the point at which a programmer utilizes a basic bit of programming and a remote system get to card. They will utilize these and go out into the general
Read more

Lets Make a Simple Keylogger

Image
Make Simple Keylogger Using Python This is a basic keylogger that can made utilizing python. I attempted to make one in cluster or vbs, yet it is basically unthinkable. So I needed to utilize python.  All of you see on the web, keyloggers, a then you download it and introduce it to spy or screen somebody (Windows 10 even has a worked in keylogger) . In any case, the issue is, is that you presumably likewise introduced a huge amount of infection of other garbage simultaneously.  I will demonstrate to you industry standards to make your own, or you can download mine beneath: (in the event that you are uncertain about downloading, I'll send you evidence that it isn't malignant) Step 1 : Installing Python Step 2 : Creating the code When you have the greater part of the python stuff introduced, open up sit still and make another content. At that point enter in the accompanying code: Then save it as something.pyw Step 3 : Test Presently dou
Read more