php - 检查 Facebook 登录状态 : Client side vs Server side

Question

在我正在构建的网站中，我需要检查用户是否登录到 facebook。我有两种可能性。我可以在服务器端执行此操作，使用如下 PHP 代码:

$facebook = new Facebook(array(
                'appId'  => _FACEBOOK_APP_ID,
                'secret' => _FACEBOOK_SECRET,
                'cookie' => true));
$me = $facebook->api("/me");
if (isset($me["id"]) {
    // User is logged in.
} else {
    // User is not logged in.
}

或者，我可以在客户端执行此操作，使用如下 javascript:

FB.getSession();
if (session != null) {
    // User is logged in.
} else {
    // User is not logged in
}

我想知道这两种方法的优缺点。

Answer 1

我只想指出，您展示的 JavaScript 替代方案已被弃用并且不再有效，文档链接 (http://developers.facebook.com/docs/reference/javascript/FB.getSession/) 重定向到用于处理 OAuth2 的新 getAuthSession() 函数

As of December 13th, 2011, the JavaScript SDK now only supports OAuth 2.0 for authentication. The ability to enable OAuth 2.0 in the JS SDK was first introduced in July. All apps were given until October 1, 2011 to test and migrate. With this change, please ensure that you are using FB.getAuthResponse to obtain the access token instead of FB.getSession. Read more about the specific changes her