Vkontakte Auth: Change users.get to secure.checkToken

[antigp]

You can't get user info by client token due vk restrictions for standalone app. Current code did work, and always get error in production. (User authorization failed: access_token was given to another ip address.) You must check token via secure.checkToken.
https://vk.com/dev/secure.checkToken

To enable client token verification, you mast set appIds and appSecret parameter in oauth dictionary:

oauth: {
        vkontakte: {
            appIds: "1",
            appSecret: "abcdefghijklmn"
        } 
    },

[flovilmart]

@antigp Thanks for the PR! Can you add some checks that the vk oauth is properly configured with the clientSecret etc... ?

[antigp]

@flovilmart Where should I do it? In validateAppId or validateAuthData?
I think it should be in validateAppId.
But i found that at the beginning is called validateAuthData and then only on success will call validateAppId.

[flovilmart]

It should be in validateAuthData as you need the app access token in order to validated the user access token right?

[antigp]

Yes.
Ok, i will do this in validateAuthData.

[facebook-github-bot]

@antigp updated the pull request - view changes

[flovilmart]

Looks like a test if failing, which is good as we enforced new parameters. Can you update the tests?

[facebook-github-bot]

@antigp updated the pull request - view changes

[antigp]

@flovilmart, Sorry but i am new in nodejs, i am iOS dev. I'm don't found how i can check new params in test. I change code to correspond "OAuth Should validate structure of vkontakte" test. Now it always return promise, that check config params. And add error message to logger on error, as it make twitter auth.

[flovilmart]

@antigp it's looking very good! Thanks!!