Facebook Contest and User Registration Date - user-registration

i'm developing a Facebook Contest (in Italy) and here i must verify that a user is registred to FB before the contest starts...
But, how can i verify this...?
In the FB API i don't find nothing that helps me (to this goal).
A related question can be :
are FB user ids progressive ? so if i have a userId 10 was born before userId 100 ?
(i ask because after my tries it seems doesn't work)...
so i ask if there's a way to verify this..
THANKS..!!!

Related

Is there a way to authenticate user without login?

I'm currently working on a problem I can't wrap my head around with. Is there a way to authenticate a user without them having to login or enter credentials?
I'm currently working with MERN Stack.
Scenario:
There are 2 websites. Website A and Website B. Multiple Users (teachers)
Users enter into a portal(Website A) with their credentials (username,password). From there they can visit Website B directly without credentials via button link. However, Website B would show different information based on who the user is. Let's say a teacher X logs in Website A then goes to Website B. Only the subjects she is teaching would show i.e Data Science.
Then if another teacher B visits Website B from Website A then he should only see his subject data i.e Database.
One of the idea that I got was with the help of JWT. Can anyone give a much broad and better solution/explanation?
I'm really new into this so bare with me. Thanks in advance.

How to see if there are other users in the database with the same username - JWT Django REST authentication

I want to know how to see whether there a two or more users with the same username when signing up. I refer to the tutorial on Medium by Dakota Lillie.
I asked because the tutorial hasn't got any error handling in it and because I am not much of React expert.
To give you an idea about the thing that happens without handling the signup is that - when I enter a username that is already existing it logs me in.
The other thing is that - when logged in (valid account) the home screen says for example - Hello, John.
But here for some reason, it says Hello, A user with that username already exists.
Please help me.
Thank you.
You can find all users in the database, and specify a where clause to check if the username the user is trying to input already exists in the database, if it exists throw an error

Import twitter followers and following list with details such as email,phone number and company information

I am trying to create a contact app(web app in angularjs) in which we can import contacts from other social networks such as twitter,linked in, gmail etc.
But I am stuck with twitter following and followers import in which
https://api.twitter.com/1.1/friends/list.json
https://dev.twitter.com/rest/reference/get/followers/list
these apis are only returning twitter app related information.
Twitter is not allowing me to see my follower/following people email,phone number,and company information etc.
So my question is
1.Is there any setting that my following/follower needs to change for giving permission to give these details?
2.Is there any apis that can return these information??
Any help will be appreciated..
Is there any setting that my following/follower needs to change for giving permission to give these details?
No. You cannot get email addresses from users you follow or are following you.
You can ask users of your app for their email adress. In order to do this, you have to ask for your app to be approved by Twitter.
Is there any apis that can return these information?
No. Additionally, many people don't give Twitter their phone number or company details.
Your best method is to ask each user what their details are.

Does exposing a user's uid in the url pose a security threat for Firebase?

I've got a small review system built in AngularJS and Firebase and the only way to identify which review is made by which user is via the uid of the user. The idea is when you then click on the user's name, you should be taken to the profile of that user.
So I would then create a route looking like /profile/{{review.author.uid}} which could translate into /profile/facebook:123234243 for example.
My question is, does it pose a security threat showing the uid in the url like this? Can it be used for any malicious actions against a user's third party account etc?
I've tried looking through their website but I can't find anything on this subject.
EDIT: Note that I need a Firebase specific answer, not a generic one about database id:s.

Facebook Taggable Friends

I am trying to get all the friends of the user currently signed in. I tried /me/friends but that didn't work as it returns only the users using my app already. I then tried https://graph.facebook.com/me/taggable_friends?access_token=somecodehere
In the browser it says
"To use taggable_friends on behalf of people who are not admins,
developers and testers of your app, your use of this endpoint must be
reviewed and approved by Facebook. To submit this feature for review
please read our documentation on reviewable features:
https://developers.facebook.com/docs/apps/review"
But when I do a GET (using Angular.js) on this URL with a valid access token using my application, it returns me a list of my friends, with their id, name, picture. Why is this happening? How can my app get the data if my browser cannot?
Also, the picture currently returned is too small. How can I get the email and larger picture of all my friends in this response?
Any help is highly appreciated.
PS: I am building a cordova app and getting access_token via CordovaOAuth.
taggable_friends works for you because it works without review for everyone with a role in the App (Admin/Developer/Tester). You only need to go through the review process if you want to go public with your App.
That beind said, taggable_friends is for tagging only, a larger picture is not neccessary for that and you definitely canĀ“t get their email. What would you do with the email of friends who did not even authorized your App? You would not be allowed to use those emails anyway. You can ONLY get the email of a Facebook user by authorizing that user with the email permission.
More information about getting access to friends: Facebook Graph Api v2.0+ - /me/friends returns empty, or only friends who also use my app

Resources