I have a lil confusion regarding the changes for OCT 1st deadline. I am using FB Connect on my site and obtaining the accesstoken from the cookie $_COOKIE[‘fbs_xxxxx’]. Do I need to change this? because according to my understanding signed_request is only available to canvas apps.
Share
You have to migrate to oauth 2.0, this means use oauth:true in javascript SDK:
which is responsible for the cookie, new cookie name will be fbsr_APP_ID instead of fbs_APP_ID.
You have to support it on a website as well as on canvas apps.
In addition canvas apps have to support SSL, websites don’t have to.
hope this helps