title: how can I not distribute my secret key (facebook api) while using python?
body: <p>I'm writing a facebook desktop application for the first time using the PyFacebook api.  Up until now, since I've been experimenting, I just passed the secret key along with the api key to the Facebook constructor like so:</p>
  
  <pre><code>import facebook
  fb = facebook.Facebook("my_api_key", "my_secret_key")
  </code></pre>
  
  <p>and then logged in (<code>fb.login()</code> opens a browser)  without any trouble.  But now, I want to distribute the code and since it's python and opensource, I want to have some way of protecting my secret key.  The wiki mentions I can use a server and ask for my secret key using the server each time my app runs (as I understand), but I have no clue as to how to start doing this, and how this should be done.  I have never done web programming and don't know where I can get a server, and how to get the server to do what is needed in this case, and I don't know how can I use that server.  I would really appreciate some help!</p>
  
  <p>Thank you.</p>