How to Set Up Social Login with Facebook for XFile Ultra
Members can sign in or register with Facebook. You create an app in Meta for Developers, add Facebook Login / Authentication, register XFile Ultra’s callback as a Valid OAuth Redirect URI, then paste App ID and App secret into Mods → Social.
Before you start
1. Social Login is a Premium plugin. If the Social section shows a lock / “Premium plugin required”, buy Social Login on xfileultra.com, then refresh the license under Settings → Main → Site identity.
2. Turn on the master Social login switch (toggle.mrc) in Admin → Settings → Mods → Social.
3. Copy the read-only Redirect URI shown for that provider — you will paste it into the provider console exactly (https, host, path; no extra slash).
Password sign-in stays available when social login is on.
Where to find it in XFile Ultra
Admin → Settings → Mods → Social
1. Turn Social login on
2. Provider → Facebook
3. Turn Facebook social login on
4. Paste App ID and App secret
5. Copy Redirect URI into Meta (Step 1)
6. Save settings
7. Test on /login or /register
Fields in XFile Ultra
| Field in admin | Setting key | From Meta |
|---|---|---|
| Facebook social login | toggle.social_facebook |
Enable/disable |
| App ID | facebook_app_id |
App ID |
| App secret | facebook_app_secret |
App secret |
| Redirect URI | (read-only) | Valid OAuth Redirect URI |
Redirect URI shape:
https://YOUR-DOMAIN/api/auth/oauth/facebook/callbackScopes used: email, public_profile.
Step 1 — Create the Meta app and add Login
1. Open Meta for Developers and sign in
2. My Apps → Create App (choose a type that supports Facebook Login / consumer login — Meta’s wizard labels change over time)
3. Open your app dashboard
4. Add Facebook Login if it is not already added (or use Use cases → Authentication and account creation)
5. Find Client OAuth settings / Valid OAuth Redirect URIs:
- Common path today: Use cases → Authentication and account creation → Customize → Go to settings
- Older UI: Facebook Login → Settings
6. Paste the XFile Ultra Redirect URI into Valid OAuth Redirect URIs
7. Save changes
8. Open App settings → Basic
9. Copy App ID and App secret (Show)
Also set App Domains to your hostname (example: example.com) and add a Privacy Policy URL when Meta requires it for Live mode.
Step 2 — Development vs Live
- Development: only roles listed on the app (admins, developers, testers) can complete Facebook login
- Live / Published: public visitors can use it (Meta may require business verification / permissions review depending on what you request)
For a first test: keep Development, add your Facebook account as a tester, then switch to Live when ready.
Step 3 — Paste into XFile Ultra and test
1. Admin → Settings → Mods → Social → Provider Facebook
2. Paste App ID + App secret
3. Ensure master Social login and Facebook social login are on
4. Save settings
5. Private window → Facebook button → approve → signed in
Common problems
Only testers can log in
App still in Development. Add test users or switch the app to Live.
redirect_uri_mismatch / URL blocked
Valid OAuth Redirect URI must match admin exactly. Re-save in Meta and retry.
App Not Set Up / invalid app id
Wrong App ID, or Facebook Login product / use case not configured.
Email missing after login
User denied email permission, or the Facebook account has no confirmed email. Password registration still works as a fallback for those users.
Facebook button missing
Plugin locked, master off, provider toggle off, or App ID/secret empty.