facebook'tan GET olarak donen JSON bilgisinin dogrulugunu kontrol eder.

facebook_api_session_validator.py

# -*- coding: utf8 -*-

import hashlib

class FacebookApiSessionValidatorException(Exception):
    pass

class FacebookApiSessionValidator(object):

    def __init__(self, application_secret, session):
        self.application_secret = application_secret
        self.session            = session
    
    def validate(self):
        hash = ""
        for key in sorted(self.session):
            if key != 'sig': hash += "%s=%s" % (key, self.session.get(key))
        hash += self.application_secret
        
        if self.getmd5(hash) != self.session.get("sig"):
            raise FacebookApiSessionValidatorException(u"invalid session")
        return True    
    
    def getmd5(self, value = None):
        hash = hashlib.md5(value)
        return hash.hexdigest()


"""
example usage
facebook_api_object =  {
    "session_key":"foo",
    "uid":"user_id",
    "expires":0,
    "secret":"foo",
    "access_token":"foo",
    "sig":"foo"
}

validateSession = FacebookApiSessionValidator("[my_facebook_application's_secret]", facebook_api_object)
print validateSession.validate()

"""