Opensocial supports Signed Requests via the gadgets.io.makeRequest() function. These requests have their arguments digitally signed so your application server can be sure that the requests are legitimate. The technique used is a variation of the OAuth protocol.

Public Key

The hi5 public key is available at http://www.o.hi5modules.com/hi5modules.com.cert


You can find sample PHP validation code here