I have created an app in the developer portal for the publisher, got the api_key and got request_token as well. But to generate session, seems api_secret is mandatory, not sure from where to obtain it.
Ah, ok. Then what's the purpose of providing api_key for publisher alone? And what do we can do with the request_token? Is that for any other feature / behaviour?