驗證FB.getLoginStatus的簽名響應

Question

任何人都有驗證從返回的響應的代碼FB.getLoginStatus？ 這是一個示例迴應。

{ "session":{ 
    "uid":"000000000000000", 
    "session_key":"0.aaaaaaaaaaaaaaa0.0000.0000000000.0-000000000000000", 
    "secret":"aa0a0_aaaaa0_aa0aaaaaa__", 
    "expires":0000000000, 
    "base_domain":"foo.com", 
    "access_token":"000000000000000|0.aaaaaaaaaaaaaaa0.0000.0000000000.0-000000000000000|0aaa0aaaaaa00aaaaaa0aaaa-0a", 
    "sig":"00aa0a0000000000a00a00aaa00a00a0" 
    }, 
    "status":"connected", 
    "perms":"{"extended":["email","contact_email"],"user":["user_birthday"],"friends":[]}" 
} 

你如何驗證簽名，祕密等？ 我有FB應用程序的祕密，但不確定需要被hased（HMACSHA256）以匹配sig值？

感謝您的幫助。

Answer 1

修復，在FB.init（）使用新的OAuth PARAM然後驗證簽署使用例如從註冊請求，等

https://developers.facebook.com/blog/post/525/