Merge pull request #143 from jeffery/fix-facebook-trust-forwarded-ses…

…sions

Adding config to allow Facebook auth to trust forwarded sessions

config/scn-social-auth.global.php.dist

@@ -60,6 +60,15 @@ $settings = array(
      */
     //'facebook_display' => '',
 
+    /**
+     * Facebook Trust forwarded sessions
+     * Improves session security on shared domains
+     *
+     * @see https://github.com/facebook/facebook-php-sdk/commit/42481fa03f98465fd6dc6eb99a5124c01e8797d2
+     *
+     */
+     //'facebook_trust_forwarded' => false,
+
     /**
      * Foursquare Enabled
      *

src/ScnSocialAuth/Options/ModuleOptions.php

@@ -57,6 +57,11 @@ class ModuleOptions extends AbstractOptions
      */
     protected $facebookDisplay;
 
+    /**
+     * @var boolean
+     */
+    protected $facebookTrustForwarded;
+
     /**
      * @var string
      */
@@ -422,6 +427,26 @@ public function getFacebookDisplay()
         return $this->facebookDisplay;
     }
 
+    /**
+     * @param boolean $facebookTrustForwarded
+     *
+     * @return ModuleOptions
+     */
+    public function setFacebookTrustForwarded($facebookTrustForwarded)
+    {
+        $this->facebookTrustForwarded = $facebookTrustForwarded;
+
+        return $this;
+    }
+
+    /**
+     * @return boolean
+     */
+    public function getFacebookTrustForwarded()
+    {
+        return $this->facebookTrustForwarded;
+    }
+
     /**
      * set foursquare enabled
      *

src/ScnSocialAuth/Service/HybridAuthFactory.php

@@ -43,6 +43,7 @@ public function createService(ServiceLocatorInterface $services)
                         ),
                         'scope' => $options->getFacebookScope(),
                         'display' => $options->getFacebookDisplay(),
+                        'trustForwarded' => $options->getFacebookTrustForwarded(),
                     ),
                     'Foursquare' => array(
                         'enabled' => $options->getFoursquareEnabled(),