The graph API did improve the situation a lot, but when I worked with it last December (creating albums, posting photos) I did encounter a gap or two in the doc

The graph API did improve the situation a lot, but when I worked with it last December (creating albums, posting photos) I did encounter a gap or two in the documentation. OAuth2 is definitely simpler than the old home-grown authentication system, which I never used because it looks insecure: They sign a string formed by concatenating name/value pairs without a delimiter between pairs.