How should a client pass a facebook access token to the server?

If you look at the API endpoints provided by all popular OAuth providers (Google, Facebook, Pocket, Git etc), you’d see that they all have HTTPS endpoints. The ways in which you can pass an access token to the provider are – i) As Query Parameter – https://yourwebsite.com/api/endpoint?access_token=YOUR_ACCESS_TOKEN ii) In the request header – GET /api/users/123/profile … Read more

How should a Facebook user access token be consumed on the server-side?

From what you describe I’d suggest to use a server-side login flow as described in https://developers.facebook.com/docs/facebook-login/manually-build-a-login-flow/v2.2 so that the token is already on your server, and doesn’t need to be passed from the client. If you’re using non-encrypted connections, this could be a security risk (e.g. for man-in-the-middle attacks). The steps would be: (1) Logging … Read more

Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)