In the facebook docs, it says we can specify:
AppID|Secret
As the application access_token
However, when going to https://developers.facebook.com/tools/access_token/ the App Token is different. This is in the form AppID|Randomnumber
Which should we be using? The PHP SDK uses the ‘Secret’ version – do we need to adjust this?
AppID|AppSecret works and I use it outside of PHP. It is the only way to publish to a users stream after their access token expires and you haven’t prompted for offline_access. The appId|randomnumber they show you on that page expire like regular access tokens where appid|appsecret do not expire.