From 15aba051ae4fd4d6c514e4d0ed42a1d714b8fca4 Mon Sep 17 00:00:00 2001 From: Stas Kravets Date: Sat, 1 Oct 2011 19:25:48 +0400 Subject: [PATCH] Merging with latest head; removal outdated FB authentication (sessions) --- social_auth/backends/facebook.py | 15 --------------- 1 file changed, 15 deletions(-) diff --git a/social_auth/backends/facebook.py b/social_auth/backends/facebook.py index f386364..9c980f0 100644 --- a/social_auth/backends/facebook.py +++ b/social_auth/backends/facebook.py @@ -105,21 +105,6 @@ class FacebookAuth(BaseOAuth2): if 'expires' in response: expires = response['expires'] - if 'session_key' in self.data: - params=['secret', 'uid', 'session_key', 'access_token', 'expires', 'base_domain'] - params_dict = dict([(p, self.data[p]) for p in params]) - - sorted = params_dict.items() - sorted.sort(key=lambda x:x[0]) - - check_str = ''.join(["%s=%s"%(x[0], x[1]) for x in sorted]) + settings.FACEBOOK_API_SECRET - expected_sig = hashlib.md5(check_str).hexdigest() - sig = self.data['sig'] - - if sig == expected_sig: - access_token = params_dict['access_token'] - expires = params_dict['expires'] - if access_token: data = self.user_data(access_token) if data is not None: -- 2.39.5