python - server side identification using facebook acces token -
python - server side identification using facebook acces token -
i developing server-side in python mobile application integrated facebook. mobile application sends me user's facebook acces token. safe plenty check if token belongs facebook application (app id token matches app id) or should implement more advanced form of authorization/security?
its first facebook integrated app sorry basic question.
you can enable app secret proof in app settings , add together appsecret_proof
parameter every phone call on server: https://developers.facebook.com/docs/graph-api/securing-requests
after that, every phone call has add together parameter, , since generated app secret (which used on server), should pretty safe.
python facebook facebook-graph-api authorization access-token
Comments
Post a Comment