I'm having a problem with the Activity Stream interface for Facebook. The relevant details on how to get an Atom feed of the stream is here:

For example, if the user ID is 44444, your application ID is 12345, your active session key is BBBBB, and your application secret is WWWWW, then the signature needs to be the MD5 hash of:

app_id=12345session_key=BBBBBsource_id=44444WWWWW

The MD5 hash of app_id=12345session_key=BBBBBsource_id=44444WWWWW is
9d27f75779c650e5769d64f28b7b7e4e, so the actual URL you would pass in this case would be:

http://www.facebook.com/activitystreams/feed.php?source_id=44444&app_id=12345
&session_key=BBBBBsig=9d27f75779c650e5769d64f28b7b7e4e&v=0.7&read

Desktop applications should compute signatures precisely the same way, except that the session secret should be used instead of the application secret.

I'm doing that, and getting a 403 Unauthorized, invalid signature. If I omit the version argument, I get a 401, claiming that I haven't got extended permissions (which I know I have here). Using their example, I get the same MD5 hash, so I'm utterly baffled as to what's happening here...

Technorati Tags: facebook, social media