READMEFacebook.md

1. FacebookAuthenticator

The out of the box FacebookAuthenticator is automatically wired up for dependency injection.

Note:- You can inject ILogger<FacebookAuthenticator>, if you want logging inside the FacebookAuthenticator.

This handles the authentication of your Facebook User Access Token (see Appendix A) by Facebook.

2. In your Startup.cs

	using AspNetCore.Security.Jwt;
	using Swashbuckle.AspNetCore.Swagger;

        public void ConfigureServices(IServiceCollection services)
        {
            .
            .
            services.AddSwaggerGen(c =>
            {
                c.SwaggerDoc("v1", new Info { Title = "XXX API", Version = "v1" });
            });

            services.AddFacebookSecurity(this.Configuration, builder =>
                builder.AddClaim("FacebookUser", userModel => userModel.UserAccessToken)
            , true);
            services.AddMvc().AddFacebookSecurity();
        }

        public void Configure(IApplicationBuilder app, IHostingEnvironment env)
        {
            .
            .
            .
            // Enable middleware to serve swagger-ui (HTML, JS, CSS, etc.), 
            // specifying the Swagger JSON endpoint.
            app.UseSwaggerUI(c =>
            {
                c.SwaggerEndpoint("/swagger/v1/swagger.json", "XXX API V1");
            });

            app.UseSecurity(true);

            app.UseMvc();
        }

3. In your appsettings.json

{
  "SecuritySettings": {
    "SystemSettings": {
      "FacebookAuthSettings": {
        "OAuthUrl": "https://graph.facebook.com/oauth/access_token?client_id={0}&client_secret={1}&grant_type=client_credentials",
        "UserTokenValidationUrl": "https://graph.facebook.com/debug_token?input_token={0}&access_token={1}"
      },
      .
      .
    },
    .
    .
    "AppId": "Your facebook app id",
    "AppSecret": "Your facebook app secret"
  },
  .
  .
  .
}

Do not change the SystemSettings. Other settings are configurable.

FacebookController - Issues the Jwt token

The out of the box FacebookController issues the JWT token.

The FacebookContoller has a POST Method (/facebook) which you can call with a Facebook User Access Token (see Appendix A).

After authentication by Facebook, a JWT bearer token is issued.

Swagger UI integration

You will get a Facebook endpoint (/facebook) automatically in Swagger UI.

You will have to obtain a Facebook User Access Token (see Appendix A) and pass that to the Facebook endpoint.

If authenticated by Facebook, you will get a JWT bearer token back.

Appendix A

To obtain a Facebook User Access Token