Hi,
I am creating chrome extension that will use facebook chat(xmpp), so, I created server for punjab, and I use strophe.js for the client.
My Problem is, I need to send the facebook app id and app secret and the user access token(all after the user authorized my app and I saved it on my database) to establish connection with facebook, which mean I need to save those keys on the client for each time, what makes the application insecure. So, I thought to create the connection to punjab passing the JID
faceb...@chat.facebook.com and the other properties that needed, and when the punjab connection manager get requested from the client for this specific resource I'll get the data the user just sent, connect to database to pull the user access token and the app id/secret, create the md5 digest for this data and send it to facebook xmpp.
So, I need some help with implementing this, or, ideas for doing it differently...
Thanks...