I’m working with a facebook client library which only asks for an access token, and not for the application id / secret, in order to make requests.
This is a little strange to me because the Facebook javascript SDK requires the app id as well, and the PHP SDK requires both the app id and the app secret.
Are the app id/secret not necessary, and if I simply supply the access token, that will be enough?
E.g if the user has given my app the publish_stream permission, and I tried to post something to his timeline using only the access token, will that succeed?
(The client I’m using is RestFB for java).
well you need to pass the
app-idand theapp-secretonly when you’re exchanging the code foraccess_tokenfor the first time when the user authenticates your app and you can store this access token in your DB to make further API calls, otherwise it should only be theaccess_tokenthat you need to pass in the API call that you make. And since you are only trying to post something to the users wall, that should only require the usersaccess_token.