Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I’ve been experimenting with making Facebook apps and I’m still not clear on app IDs and secrets.
I tried this code on github and got it working. I noticed that it only requires an app ID and the correct url to work, but nowhere do you need to enter an app secret.
Why was an app secret not required?
The app secret is not required on the client side. In fact, it is a security risk to store the app secret on the client side. By client side I mean in JavaScript, iOS, etc. The only purpose for the app secret is on your web server. For example, if you are making an API call from PHP on behalf of the user you must use the app secret.