Merge pull request #112 from SammyK/enable-app-secret-proof-by-default

Enabled app secret proof by default

Author: Fosco Marotto

src/Facebook/FacebookSession.php

@@ -55,7 +55,7 @@ class FacebookSession
   /**
    * @var bool
    */
-  private static $useAppSecretProof = false;
+  private static $useAppSecretProof = true;
 
   /**
    * When creating a Session from an access_token, use:

tests/FacebookRequestTest.php

@@ -120,6 +120,8 @@ public function testGracefullyHandlesUrlAppending()
 
   public function testAppSecretProof()
   {
+    $enableAppSecretProof = FacebookSession::useAppSecretProof();
+
     FacebookSession::enableAppSecretProof(true);
     $request = new FacebookRequest(
       FacebookTestHelper::$testSession,
@@ -135,7 +137,9 @@ public function testAppSecretProof()
       'GET',
       '/me'
     );
-    $this->assertTrue(!isset($request->getParameters()['appsecret_proof']));
+    $this->assertFalse(isset($request->getParameters()['appsecret_proof']));
+
+    FacebookSession::enableAppSecretProof($enableAppSecretProof);
   }
 
 }