Mirror Facebook’s API Key / Secret Formula
December 7th, 2008The api key and a secret is used for authenticating and preventing spam against your servers. For this example the the key and the secret are lowecased GUIDs. So here they are:
API Key: a060d1b6c42311dd9f94c60056d89593
Secret: 9425505ec42611ddb415962356d89593
Now hackers can easily tamper with the key if it is passed via HTTP without masking it, so to prevent that, you’ll have to do the following:
- Create a Raw URL and concatenate the api key and the secret
- MD5 Hash the entire URL. The result is the signature.
- Create a new URL with only the api key and a signature at the end.
- Make the call to the server.




