Facebook access token: server-side vs client-side flows
Posted
by
alexey
on Stack Overflow
See other posts from Stack Overflow
or by alexey
Published on 2012-01-30T17:21:19Z
Indexed on
2014/05/30
3:26 UTC
Read the original article
Hit count: 192
Facebook Platform supports two different OAuth 2.0 flows for user login: server-side (known as the authentication code flow in the specification) and client-side (known as the implicit flow). The server-side flow is used whenever you need to call the Graph API from your web server. The client-side flow is used when you need to make calls to the Graph API from a client, such as JavaScript running in a Web browser or from a native mobile or desktop app.
What is the difference between access tokens taken by these flows? It seems like they length differ.
Can we use server-side flow token on a client? And otherwise, can we use client-side flow token on a server?
© Stack Overflow or respective owner