Facebook JS SDK does not need app secret to authenticate : How ...

I'm looking into how secure the authentication is also - I think things have changed since you asked this q, so perhaps this information was not ...