When looking at the Graph API documentation, I noticed that in this page: http://developers.facebook.com/docs/api there are links to say, my own friend list (http://graph.facebook.com/me/friends) that have an access token that seems to be generated out of nothing and has very little privileges. What is this token? Is there anyway to generate it myself without going to http://developers.facebook.com/docs/api?
Facebook has implemented oauth v2 draft
You need to have active user session or permanent tokens (which could be taken from active user session, which permits permanent access grant)
More detailed at: http://developers.facebook.com/docs/authentication/