feat(auth): handle facebook auth server-side

package.json

@@ -40,6 +40,7 @@
     "body-parser": "^1.15.0",
     "cors": "^2.7.1",
     "debug": "^2.2.0",
+    "es6-request": "^1.2.2",
     "express": "^4.13.4",
     "falcor-express": "^0.1.2",
     "falcor-http-datasource": "^0.1.3",

src/api/auth/index.js

@@ -44,6 +44,42 @@ export default db => {
           });
         });
         break;
+      case 'facebook':
+        let http = require("es6-request");
+        let access_token = config.oauth.facebook.clientId + "|" + config.oauth.facebook.clientSecret
+
+        http.get( "https://graph.facebook.com/debug_token" )
+        .query({
+          "input_token": token,
+          "access_token": access_token,
+        })
+        .done((response, body) => {
+          let object = JSON.parse(body.toString());
+          if ( object.data.is_valid ) {
+            http.get( "https://graph.facebook.com/v2.5/" + object.data.user_id )
+            .query({
+              "access_token": token,
+              "fields": "email,name",
+            })
+            .done((reply, stuff) => {
+              let me = JSON.parse(stuff.toString());
+              const email = me.email;
+              const name = me.name;
+              findOrCreateUser( db, email, "", "", name )
+              .subscribe( user => {
+                const body = ({
+                  provider,
+                  token: jwt.sign({ provider: 'facebook', email }, jwtSecret, { subject: user._id } ),
+                });
+
+                res.json( body );
+              }, err => {
+                res.status(500).json({ status: 500, message: err })
+              });
+            })
+          }
+        });
+        break;
       default:
         res.status(400).json({ status: 400, message: `Unknown OAuth provider '${provider}'` });
     }

src/config.js

@@ -15,8 +15,8 @@ export default {
     },
 
     facebook: {
-      clientId: process.env.GOOGLE_CLIENT_ID,
-      clientSecret: process.env.GOOGLE_CLIENT_SECRET,
+      clientId: process.env.FACEBOOK_CLIENT_ID,
+      clientSecret: process.env.FACEBOOK_CLIENT_SECRET,
     },
 
     google: {