scottmac / crypto-request-examples

A collection of samples for validating and decrypting signed and encrypted requests from Facebook.

signed & encrypted requests

Provides samples for decoding signed and encrypted requests in a few different languages. To run the tests:

./test.sh

Note, you'll likely need to ensure some extensions are available in your environment.

Python

Requires PyCrypto. To install, run:

 easy_install pycrypto

Ruby

You will need a build of Ruby with OpenSSL support. Additionally, you'll need JSON. To install, run

 gem install json

Java

Java requires these libraries:

• Apache Commons Codec
• json-simple

If you see a exception along the lines of java.security.InvalidKeyException: Illegal key size, you may need to get the right policy files to allow the use of AES-256 encryption. The policy files are available here.

PHP

You'll need these extensions:

• JSON
• Hash
• mcrypt

If these aren't installed, then your script will fail with a message like:

 Fatal error: Call to undefined function mcrypt_create_iv()

If they aren't activated but are present on your system, you can try to activate them by adding these lines to your php.ini file:

extension=mcrypt.so

If that doesn't work (gives as "Unable to load dynamic library" error), then you'll need to recompile PHP with the extensions included or install the extension using your system package manager.