AJAX working on 1.4.0 but not on the last version

[nicolas-besnard]

I'm using this gem on my API used by Android / iOs devices. To do that, I use the access_token.

My application is working with a version 1.4.0 of this gem, but I get an error with the last version :

facebook) Authentication failure! no_authorization_code: OmniAuth::Strategies::Facebook::NoAuthorizationCodeError, must pass either a `code` (via URL or by an `fbsr_XXX` signed request cookie)

Any idea ?

[simi]

Hello, this is solved in our issue tracker.

Check those links:

https://github.com/mkdynamic/omniauth-facebook/wiki/CSRF-vulnerability:-CVE-2013-4562
#164
#107 (comment) (!!! NOT SECURE !!!)

Feel free to reopen if you think it is different problem.