Initial Commit - Plugin v1.0.0

includes/admin/fb-login-cb.php

@@ -0,0 +1,69 @@
+<?php
+
+function fbr_fb_login_cb(){
+  
+  $fbr_opts = get_option( 'fbr_opts' );
+  extract( $fbr_opts );
+
+  $fb = new Facebook\Facebook([
+    'app_id' => $fbr_app_id,
+    'app_secret' => $fbr_app_secret,
+    'default_graph_version' => 'v2.2',
+  ]);
+  
+  $helper = $fb->getRedirectLoginHelper();
+  
+  try {
+    $accessToken = $helper->getAccessToken();
+  } catch(Facebook\Exceptions\FacebookResponseException $e) {
+    // When Graph returns an error
+    echo 'Graph returned an error: ' . $e->getMessage();
+    exit;
+  } catch(Facebook\Exceptions\FacebookSDKException $e) {
+    // When validation fails or other local issues
+    echo 'Facebook SDK returned an error: ' . $e->getMessage();
+    exit;
+  }
+  
+  if (! isset($accessToken)) {
+    if ($helper->getError()) {
+      header('HTTP/1.0 401 Unauthorized');
+      echo "Error: " . $helper->getError() . "\n";
+      echo "Error Code: " . $helper->getErrorCode() . "\n";
+      echo "Error Reason: " . $helper->getErrorReason() . "\n";
+      echo "Error Description: " . $helper->getErrorDescription() . "\n";
+    } else {
+      header('HTTP/1.0 400 Bad Request');
+      echo 'Bad request';
+    }
+    exit;
+  }
+  
+  // The OAuth 2.0 client handler helps us manage access tokens
+  $oAuth2Client = $fb->getOAuth2Client();
+  
+  // Get the access token metadata from /debug_token
+  $tokenMetadata = $oAuth2Client->debugToken($accessToken);
+  
+  // Validation (these will throw FacebookSDKException's when they fail)
+  $tokenMetadata->validateAppId($fbr_app_id); // Replace {app-id} with your app id
+  // If you know the user ID this access token belongs to, you can validate it here
+  //$tokenMetadata->validateUserId('123');
+  $tokenMetadata->validateExpiration();
+  
+  if (! $accessToken->isLongLived()) {
+    // Exchanges a short-lived access token for a long-lived one
+    try {
+      $accessToken = $oAuth2Client->getLongLivedAccessToken($accessToken);
+    } catch (Facebook\Exceptions\FacebookSDKException $e) {
+      echo "<p>Error getting long-lived access token: " . $helper->getMessage() . "</p>\n\n";
+      exit;
+    }
+  }
+  
+  $_SESSION['fb_access_token'] = (string) $accessToken;
+  
+  // User is logged in with a long-lived access token.
+  // You can redirect them to a members-only page.
+  wp_redirect( admin_url( 'admin.php?page=fbr_plugin_opts&status=2' ) );
+}