Requiring HTTPS for Facebook Login
Facebook For Developers
When turned on, it requires all Facebook Login redirects to use HTTPS, and all Facebook JavaScript SDK calls that return or require an access token to occur only ...