The login through facebook functionality appears to work, but as soon as you attempt to access a secured page the following error is displayed and the user is logged-out:

"Access denied by Secure Pages module

The Secure Pages module has detected an invalid session access attempt. Please log in again."

Comments

alexfisher’s picture

Sorry, correction: This is caused by a conflict with the Secure Pages Hijack Prevention module. Disabling this module removes the error. However, it still throws a mixed SSL/non-SSL warning message in browsers.

Investigating use of Facebook Connect Via SSL at:

http://wiki.developers.facebook.com/index.php/Facebook_Connect_Via_SSL

Will still probably require modification to the Facebook Connect module to at least use:

As well as xd_receiver_ssl.htm inplace of xd_receiver.htm.

cerup’s picture

This is also a problem with the twitter module and using twitter to login.

If you login and then attempt to go to a secure page, you get:

"Access denied by Secure Pages module

The Secure Pages module has detected an invalid session access attempt. Please log in again."

alexfisher’s picture

Using vectoroc's version of Facebook Connect allows use of Secure Pages / SSL:

http://drupal.org/node/635568#comment-2437882

However, the error you're seeing above might have to do with the Secure Pages Hijack Prevention module instead of Secure Pages.

vectoroc’s picture

It would be great if you say what is the problem here. I don't use "Secure Pages Module", but ssl works fine in my case. If you can't I will check it later when I'll have time for it

vectoroc’s picture

Status: Active » Fixed

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

mcarbone’s picture

Title: Conflict with Secure Pages Module » Conflict with Secure Pages Hijack Prevention Module
Version: 6.x-1.0-beta8 » 6.x-2.x-dev
Category: bug » feature
Status: Closed (fixed) » Active

There is still a conflict with the Secure Pages Hijack Prevention module: http://drupal.org/project/securepages_prevent_hijack

vectoroc’s picture

Version: 6.x-2.x-dev » 6.x-1.0-beta8
Status: Active » Closed (fixed)

that's bad. lets open new issue for that