无需 HTTPS 的图形 API 访问
我有以下问题: 我可以不使用 HTTPS 协议而只使用普通的 HTTP 与 Graph Api 进行通信吗?
我想避免这种情况,因为这是我的客户的要求之一。但是,由于该要求还包括访问私人数据 - 我将向他解释情况。
谢谢大家有用的答案!
I have following question:
Can I communicate with Graph Api without using HTTPS protocol, only usual HTTP ?
I want to circumvent this, because it is one of the requirements of my customer. However, since the requirement also includes access to private data - I'll explain the situation to him.
Thanks Everybody for useful answers!
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(4)
正如 iggy 所说,在传递 access_token 时需要使用 https。
示例: http://graph.facebook.com/search?q=platform&type =页面
错误:http://graph.facebook.com/search?q=platform&type=page&access_token=2227470867|2.AQD0zuvucVwGh206.3600.1314345600.0-732484576|VV_q-blMVfkOyZfJvd-27uvYkn4
You need to use https when passing an access_token as iggy stated.
Example: http://graph.facebook.com/search?q=platform&type=page
Error: http://graph.facebook.com/search?q=platform&type=page&access_token=2227470867|2.AQD0zuvucVwGh206.3600.1314345600.0-732484576|VV_q-blMVfkOyZfJvd-27uvYkn4
如果访问可公开访问的数据,您可以通过 HTTP 访问它,但如果您需要的信息需要传递访问令牌,则调用必须通过 HTTPS
You can access it over HTTP if accessing data which is publicly accessible, but if the information you require needs an access token to be passed, the call must be over HTTPS
不。您正在通过线路传递有效的承载访问令牌。这需要通过加密的线路来完成,以避免危及用户的隐私
No. You're passing what are effectively bearer access tokens over the wire. This needs to be done over an encrypted over the wire to avoid risking your users' privacy
AFAIK 不 - 这是安全措施之一......为什么你想规避它?
AFAIK no - that's one of the security measures... why would you want to circumvent that ?