why do I get "Invalid appsecret_proof provided in the API argument"

facebook facebook-graph-api app-secret
user1508682 picture user1508682 · Sep 8, 2013 · Viewed 72.5k times · Source

Since the latest change on Facebook, regarding the appsecret_proof: https://developers.facebook.com/docs/reference/api/securing-graph-api/, we are still unable to download performance reports even after enabling/disabling features from Advanced Settings in our app, or apply the code as described in their document.

We are constantly getting this error:

{"error":{"message":"Invalid appsecret_proof provided in the API argument","type":"GraphMethodException","code":100}}

and I've open a confidential bug but no one returns to me with an answer.

I really don't know what more could we try?

Answer

Igy picture Igy · Sep 9, 2013

The error is (based on my experience) almost certainly correct; it means you're proving an invalid appsecret_proof with your API call

Assuming you're using the standard PHP SDK without modifications, the most likely reasons for this are:

  • You configured the wrong app ID in the SDK code
  • You configured the wrong app secret in the SDK code
  • You're trying to use an access token from the wrong / another app

Related questions

Facebook OAuth "The domain of this URL isn't included in the app's domain"

Let me first start with saying I've searched for an answer to this question for quite some time... I'm trying to setup Facebook OAuth to work with my application that is being developed locally on my machine. Everything was working …

Read More
Facebook Graph API, how to get users email?

I'm using the Graph API, but I can't figure out how to get a logged-in users email address. The intro to Graph states "The Graph API can provide access to all of the basic account registration data you would typically …

Read More
Facebook api: (#4) Application request limit reached

Since late November we are hitting the application limit on the Facebook API. We are fetching user's photos, and selected 25 friends photos → this is done when a user signatures in (we are building albums for the users). The above action …

Read More