fbauth 0.9.9.2 → 0.9.9.3

data/README.mdown

@@ -24,6 +24,7 @@ iFrame Apps
 
 - first page load as an iFrame app inside Facebook, where authentication params are sent in the URL used for your iFrame
   - this is particularly required for mobile Safari and other browsers blocking cross-domain cookies by default
+  - handles the old session parameter, as well as the new signed_request parameter
 
 - loading from the cookie initialized by the JavaScript API
   - works great for browsers supporting cross-domain cookies by default

data/app/controllers/facebook_auth_functions.rb

@@ -28,13 +28,13 @@ private
     # Clear session variable if its data was bad
     session[:fbauth] = nil
 
-    # If no valid session auth, try the cookie from the JS SDK
-    data = parse_cookie
+    # If no valid session, try the URL params (session, signed_reuest)
+    data = parse_parms
     auth = validate_and_save(data) unless data.nil?
     return auth unless auth.nil?
 
-    # If no valid session or cookie auth, last chance try the URL
-    data = parse_parms
+    # If no valid session auth or params auth, last chance try the JS SDK
+    data = parse_cookie
     auth = validate_and_save(data) unless data.nil?
     return auth
   end

metadata

@@ -6,8 +6,8 @@ version: !ruby/object:Gem::Version
   - 0
   - 9
   - 9
-  - 2
-  version: 0.9.9.2
+  - 3
+  version: 0.9.9.3
 platform: ruby
 authors: 
 - Three Wise Men Inc.