3 ms·
No. If you're a little rusty on this whole Facebook API thing, don't talk about it in bold words. This is how every Facebook application works, there's nothing
by zyb09 15y ago
No. If you're a little rusty on this whole Facebook API thing, don't talk about it in bold words.
This is how every Facebook application works, there's nothing special about distributing the API keys. That's what Facebook tells you to do. Yes you could pretend to be that application - you can do this with every application - and it's not a big deal. Still you can't upload to someone else's account or access their galleries under any circumstances with just the API keys.
- saurik 15y agoI will once again (scroll down for me having to paste this three more times) quote the Facebook documentation: "The app secret is available from the Developer App and should not be shared with anyone or embedded in any code that you will distribute (you should use the client-side flow for these scenarios)." You fundamentally should not be able "to do this with every application", and you certainly can't with any of the applications that I've deployed (whether for myself, my company, or companies that I've done consulting building these apps for). (...and yes, I say I'm "rusty" as I'm "out of the game" as it were, but that is mostly because I'm anal about being accurate with my concessions: I have an app right now that has "144,513 monthly active users".)