OAuth 2.0 on facebook

Facebook 從10月1號起就要採用oauth2登入了...

In May we announced that all apps on Facebook need to support OAuth 2.0 and HTTPS to make the platform more secure. If you haven't already made these changes, visit the Developer Roadmap before October 1st for more information about how to upgrade your apps and avoid having them disabled.

• all Website and Canvas apps must exclusively support OAuth 2.0 (draft 20)
• all Canvas and Page Tab Apps must use the signed_request parameter
• an SSL Certificate is required for all Canvas and Page Tab apps (not in Sandbox mode and not FBML)
• old, previous versions of our SDKs will stop working, including the old JavaScript SDK (FeatureLoader.js), old iOS SDK (facebook-iphone-sdk)

每個Canvas 和 Page Tab都要用signed_request

剛剛看了一下Flask-Oauth好像是用1.0a的標準, 不知道跟Oauth2差距有多少...