3 ms·
Are you sure that they don't enforce SSL all over? That's the whole point of OAuth2 getting rid of signed request :(
by seivan 13y ago
Are you sure that they don't enforce SSL all over?
That's the whole point of OAuth2 getting rid of signed request :(
- sjtgraham 13y agoIIRC I don't think it's OAuth. It's (or was when I last looked ~6 months ago) a different API using a session cookie, and yes I'm sure :)