android - Which Facebook application security Settings shall I disable / enable -


i'm using facebook sdk in android application, count on fb sdk user logged application , grant application needed permissions, , know fb sdk offers user login dialog whether android facebook application installed or not.

my question is, options should enable / disable based on info provided above application secured as possible?

p.s: have no experience on web programming or dealing sending / receiving data servers, , no experience in creating oauth flows, these options confusing me.

p.s -2: set these options in picture based on facebook security tool check recommendation secure app, , based on reading login security

facebook login security options (click here see options picture)

and confused me more, though disabled (client oauth settings), facebook security check tool informs me:

**state parameter used on embedded browser oauth login:** *it looks you're using embedded browser oauth login flow. use state parameter guard against cross-site request forgery. see documentation more information.* 

knowing haven't yet submitted these new changes reviewed facebook.

like documentation says:

disable client oauth login if not using facebook login in sdk user logged in app

disable web oauth login if not planning provide web related login services app

disable embedded browser oauth login if not login flow in webview in app


Comments

Popular posts from this blog

Hatching array of circles in AutoCAD using c# -

ios - UITEXTFIELD InputView Uipicker not working in swift -

Python Pig Latin Translator -