Checking Facebook's HMAC-SHA256 Encode Signature Using ColdFusion
To properly integrate Facebook's Login For The Web to permit your web app users to authenticate themselves in your app using Facebook, I believe that if your app needs any modicum of security, you should also verify the signature on the "Signed Request". Sounds easy enough, Facebook even provides a PHP example. Here's my Coldfusion version.

Thu, May 16, 2013 at 3:46 PM