No documentation on calling the AppSecret Proof for Server API?

Question

If you enable the Advanced Settings option , it gives me a BAD Request or error code 400

If I enable this option, what is the required value for the AppSecret_Proof parameter?

Answer 1

If you visit github and look at your SDK , you will see how they generate the appsecret_proof value.

This part has recently been added, so you need to refer to the latest version of the PHP SDK. To activate / inactivate, as you already know, you need to visit the application panel> Settings> Advanced.

EDIT: 2013-08-09
Now they have an official document .

Answer 2

From the documentation article Protecting GUI API Requests :

The secret proof application is the sha256 hash code of your access token, using the application secret as a key. Here's what the call looks like in PHP:

$appsecret_proof = hash_hmac('sha256', $access_token, $app_secret);