Facebook: Upgrading to OAuth 2.0 | Straylight Run
nger passed back to your callback URL in the query string upon authentication. Now, an encoded signed_request is passed back in the query string, which contains the same info (user ID, access token, expiration time, etc.)

No comment on this link yet.