Facebook

Sign in to Meta for Developers

Go to developers.facebook.com and sign in with the Facebook account that should own the app. Meta walks you through registering as a developer the first time, which means confirming your contact details before you can create anything.

Create an app

From My Apps, press Create App. The first screen wants an App name - this is what visitors read on the login dialog - and an App contact email.

Choose the Facebook Login use case

On the Use cases step, tick Authenticate and request data from users with Facebook Login. This is the one that gives the app an OAuth dialog; the others (Ads Manager, Threads, games) do not, and Meta will not let you combine some of them on one app.

Finish the wizard - the Business step lets you skip connecting a business portfolio, and Finalize creates the app.

Add the OAuth redirect URI

In the app dashboard, open the Facebook Login use case's settings - Use cases → Authenticate and request data from users with Facebook Login → Customize → Settings on a new app, or Products → Facebook Login → Settings on an older one. Paste your URI into Valid OAuth Redirect URIs and save.

VitNode builds this URI itself, from NEXT_PUBLIC_WEB_URL, so it has to match character for character - no trailing slash, no locale prefix.

Copy the App ID and App Secret

Go to App settings → Basic in the left navigation. The App ID is in plain text; the App Secret is behind a Show button and your password.

Set the environment variables

Server-side variables, so no NEXT_PUBLIC_ prefix - that prefix is what marks a value for the browser bundle, and an app secret in the browser bundle is an app secret you have published.

FACEBOOK_CLIENT_ID=1234567890123456
FACEBOOK_CLIENT_SECRET=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Register the adapter

Add FacebookSSOApiPlugin to authorization.ssoAdapters in your API config. It is a plain factory function, not a class - there is no new.

import { FacebookSSOApiPlugin } from '@vitnode/core/api/adapters/sso/facebook'
import { buildApiConfig } from '@vitnode/core/vitnode.config'

export const vitNodeApiConfig = buildApiConfig({
  plugins: [],
  authorization: {
    ssoAdapters: [
      FacebookSSOApiPlugin({
        clientId: process.env.FACEBOOK_CLIENT_ID,
        clientSecret: process.env.FACEBOOK_CLIENT_SECRET,
      }),
    ],
  },
})

The redirect URI is computed when this file is evaluated, so restart the API rather than relying on a hot reload:

bun dev

pnpm dev

npm run dev

Verify it works

Ask the API what it thinks it supports:

curl http://localhost:3000/api/@vitnode/core/middleware
# {"isEmail":false,"sso":[{"id":"facebook","name":"Facebook"}]}

Then open /login and press Facebook. You should get Meta's "Continue as ..." dialog, be bounced back to /login/sso/facebook?code=...&state=..., and land on the front page signed in. Your account now has a row in core_users_sso with providerId facebook.

Publish the app

While the app is Unpublished (the badge next to Publish in the screenshot above), only people with a role on it - admins, developers, testers - can sign in. Everyone else is turned away at Meta's dialog before VitNode ever sees a callback. Go to Publish and switch the app live once the round trip works.

public_profile and email are both standard-access permissions, so this does not require App Review. Ask for anything beyond them and it will.