davejohnson/phonegap-plugin-facebook-connect — Issue #57: App Secret should not be distributed
Author: atimb
Created: 2011-11-06 23:51:05+00:00
State: open

I'm sorry to be this negative, but the facebook app secret "should not be shared with anyone or embedded in any code that you will distribute" (http://developers.facebook.com/docs/authentication/).

If I put it in my AndroidManifest.xml (as it is required by this plugin), it's not a big deal to recover it:
http://stackoverflow.com/questions/2097813/how-to-parse-the-androidmanifest-xml-file-inside-an-apk-package

Any plan on improving this ? I'm hesitating to use the plugin because of this.