I am working on a white listed app that is allowed to called the private auth.login api. Because the api is a private one the standard Facebook docs at developers.facebook.com don't help.
There was a draft security bulletin a few months back that said we would need to start passing a unique machine id. I am retreiving this from the rest api but am getting "incorrect signature" errors when passing it back up.
Anyone else now passing up machine_id?