@dan Thank you for the additional information. It definitely would allow for additional security. I will file an issue shorlty.

@dan Thank you for the additional information. It definitely would allow for additional security. I will file an issue shorlty.

I was searching the forum to see if there's anyone having the same issue we have with Facebook as IP with "Require App Secret" turned on. Basically, when we call /api/identity-provider/login and we provide the accesstoken our application received from Facebook authentication, FusionAuth does not send the appsecret_proof with the request, therefore the request fails.

Any workarounds? (other than turning the setting off)

Thanks!
Jojo