I'm developing a UI functionality for our facebook app locally.
I am getting the content like $auth_url and then adding it in the source src of an iframe. But this gives me a few errors like 500 internal server error and Permission denied for <http://static.ak.facebook.com> to get property Window.Arbiter although i do see a facebook.com in the iframe. it works and reloads to the canvas if i use top.location.href instead on the same link.
Am I doing something wrong? or am I not allowed to do this locally?
Facebook will crawl every address it receives a call from, and will subsequently deny requests it cannot perform this crawl for.
Set up port forwarding in your router/modem and patch port 80 through to the web. Make sure to look up what your external Ip address is, and to update the settings for your app on developers.facebook.com to reflect the external address and path.
be sure to read this article on local facebook app development