How to implement appsecret_proof with PHP SDK - facebook-graph-api

I am trying to implement appsecret_proof to my web app. I am using PHP SDK. I searched on the internet for some solutions, but there are confusing info. Some pages say you only need to set your app Settings/Advanced/Security/ Require App Secret to yes and and PHP SDK will automatically send 'appsecret_proof' with the call, but others say you have to add 'appsecret_proof' as a parameter to a call. What is the true?
If I have to add a parameter to a call, how can I add it to this
$graphResponse = $fb->get('/me?fields=id,name,first_name,last_name,email,picture');
?

but others say you have to add 'appsecret_proof' as a parameter to a call. What is the true?
The easiest way to get proper, reliable information on issues like this, is always to check the official documentation.
https://developers.facebook.com/docs/graph-api/securing-requests/ says:
If you're using the official PHP SDK, the appsecret_proof parameter is automatically added.

Related

Migration path for Fql.multiquery

I'm new to Facebook development. I'm working on migrating an existing app in accordance to the Graph API upgrade guide. I'm looking for guidance around calls such as api.facebook.com/method/Fql.multiquery.
My question is: does this type of API need to be upgraded as well, or does it only apply to graph.facebook.com calls? I want to ensure that api.facebook.com/method/Fql.multiquery calls will still work after 4/30/15.
You may want to take a look at the Batch Requests of the Graph API. You can also specify dependencies between the requests.
Calls to http://api.facebook.com/method/Fql.multiquery will no longer work. The REST API is long deprecated anyway.
As #luschn said, you have to migrate to the Graph APIs batch requests, and use the /fql endpoint. You can only use FQL if you have a v2.0 app, and not higher.

Automatically Logging Into A Website From C++

I'm trying to make an autorun app with c++ that doesn't have an UI, but it will log into google drive when u plug in the USB drive. I was wondering if there was a way to do this, either by using google api, or by detecting the field forms on the login screen, and automatically filling them in. Also this is going to be strictly a private software.
Add one part How do you make a HTTP request with C++? with two parts https://developers.google.com/drive/v2/reference/.
Shake lightly. Chill and serve.
Optionally add for flavor: https://developers.google.com/drive/auth/web-server
However, I'm unable to find a c++ oath2 library. The closest thing I found was https://code.google.com/p/twitcurl/. If you find an oath library, please comment on this.
UPDATE:
POCO has a OAuth 1.0 implementation seen here: https://github.com/pocoproject/poco/tree/develop/Net/samples/TwitterClient/src
Also, according to this landmark blog post, there are still many concerns about OAuth 2.0's security. The 1.0 implementation above is what I would attempt.
For more information on OAuth 2.0, see RFC6749 and RFC6750.

how connect to echonest from enyo

I am new to Enyo and web services. I am looking to build a web page with Enyo that will require use of Echonest. Can anyone help me understand how to connect to the Echonest service from inside Enyo and whether to use SOAP, REST, or something else?
I assume you are talking about the Echo Nest found here: http://the.echonest.com ?
Briefly glancing at their API, you may not have to use SOAP or REST since everything is accessible with simple GET requests through the Web service. It looks like the hardest part of using their API will be generating OAuth signatures for authenticated requests.
As far as the enyo.WebService, http://enyojs.com/api/#enyo.WebService, goes, you should be able to include the kind, set the URL and call the .send() method on it. Then you response handler would get the data back (I recommend json) so you can do what you will with it.
Another option would be to use enyo.Ajax, http://enyojs.com/api/#enyo.Ajax, directly. enyo.WebService wraps that and provides a familiar (to Enyo 1 developers) way to use it.

Beginning Webservice with Joomla

I am new to joomla 2.5. I need to design application which is to be used by STB(SET TOP BOX) or TV Application. Is it possible to use below features with Joomla 2.5 ?
Authenticate users where credentials are passed from STB or TV via POST method.
Calling Webservices after authentication, custom string format needs to be return instead of JSON or XML.
Is it possible to host file with encryption from developed administrator component ?
Any Ideas? Any good beginners book for Joomla 2.5 ?
Thanks.
yes if you previously download the login page and grab the token, which is a dynamic security feature
no problem there, just make sure you end your controller method with
exit
so the template won't be output.
I can't figure out what you mean. Encrypted files will not be accepted on the Joomla Extension Directory, but you can use them in custom components.
Beginners books: really depends on your php and overall development experience. The reference and plenty of guides are on docs.joomla.org (section developers), but check here first for any questions, there are plenty of answers on Joomla!

OAuth authentication for Google API with Qt

I'm trying to get authenticated for receiving and publishing Google Buzz-es from a Qt 4.6(c++) application. I'm looking for a cross-platform solution.
Could anyone provide some working solution for this purpose?
You can also try kQOAuth which is a new Qt library for doing OAuth authentication. It will let you do the user authentication very easily too, if you like.
Supports OAuth 1.0 and HMAC-SHA1. No external dependencies.
http://www.johanpaul.com/blog/2010/10/introducing-kqoauth-easy-and-powerful-oauth-library-for-qt/
I couldn't find any either, so I made one: https://github.com/pipacs/steps/tree/master/o2 . Based on KQOAuth, tested with Google Docs.
Quick google search gave me QOAuth, which is a Qt lib and liboath which is a C based API.
I'm using QOAuth, you have to do some hack before you can use QOAuth in windows.
So far, I could get the request token from Google, and let the user authorize it.
But when I try to get the access token with the oauth_verifier, it keeps telling me the signature is invalid.
Anyway, I've used QOAuth to deal with other SP successfully. So the QOAuth is the solution.