This past spring, Facebook enacted major changes to their platform, including how developers can create and add “fan” pages and other customized content. Out went FBML, their somewhat proprietary (and somewhat limited) markup language. Staying is iframes—or in Facebook’s glossary, iframe apps—with the ability to incorporate standard web resources into Facebook using HTML and CSS, Javascript, PHP, Python, .Net, and just about any language or utility used in web development. Such openness of course brings a demand for security, and Facebook’s first effort in that direction was adding OAuth 2.0 support for those requiring user authentication and authorization.

continue reading this post