Lesson notes
How it works
How Facebook login connects to Memberstack
Facebook login works like Google login. You create an app on Facebook's side that trusts Memberstack's callback address, then give Memberstack the app ID and app secret. When a member clicks Continue with Facebook, Facebook confirms who they are and sends them back to Memberstack, which logs them in or creates their account.
The extra work on Facebook's side is the app details and business verification it needs before the app can go live.
Creating the Facebook app
Memberstack's Facebook settings under Settings, Auth Providers link to Facebook's developer site, which is a good place to start.
- In Facebook for Developers, click Create App and enter an app name and contact email.
- Pick the use case Authenticate and request data from users with Facebook Login.
- Connect a business portfolio, or skip it for now. You'll need a verified business before you can publish.
- From the dashboard, customize the Facebook Login button and add the Email permission.
- In the login settings, make sure client OAuth login and web OAuth login are on, and add
https://client.memberstack.com/auth/callbackunder Valid OAuth Redirect URIs. Save. - In Settings, Basic, fill in display name, app domains, privacy policy URL, user data deletion instructions URL, app icon and category.
Connecting it in Memberstack and going live
Copy the app ID and app secret from Settings, Basic. Click Show to reveal the full secret first. Copying the masked version causes an invalid_client error. In Memberstack, go to Settings, Auth Providers, click Configure next to Facebook, paste both, turn Facebook on and save.
In Webflow, put a Facebook button inside your Memberstack signup form. The Social Auth Components have one ready, or add data-ms-auth-provider="facebook" to your own button.
Finally, start business verification under Review, Verification, then publish the app from the Publish section. Facebook's review can take a few days. Login works during review, though some actions may keep asking for verification until it's done.