I'm working on a project where users can give us publish_actions from the app, to able our backend publish a Custom Open Graph Story when some conditions are accomplished.
The flow is:
User login with Facebook on our app
User buys a ticket
User click on share story on facebook button, at this point publish_actions for user are requested
The app call a REST endpoint and the backend uses user token to send and open graph story
We tested this flow with our accounts (included as develeopers on facebook so act as a test-user) and it works as expected.
In order to allow this feature for the rest of users, we should send a submission review for publish_action permission? And also for our open graph story?
n order to allow this feature for the rest of users, we should send a submission review for publish_action permission? And also for our open graph story?
Yes, of course you need to get both reviewed, before regular users can be asked for that permission, and publish that OG story.
Related
I am creating an application using which users will manage their Facebook messenger and post comments on a page. I have implemented the Facebook Login which asks the user for page_messaging permission. I have also configured the webhook and it is working fine.
Now, Facebook documentation states the following
Generate a Page access token to start using the platform APIs. You
will be able to generate an access token for a Page if:
You are one of the Page admins, and
The app has been granted the Page's permission to manage and access Page conversations in Messenger.
So, how can I make my webhook listen to the messages of the page that have granted me permission to manage and access the page? I have looked for hours trying to find this in the documentation. No Luck!
I created an app for my clients. They uses this app from their website to post on their Facebook Page (and as the Facebook Page).
they use a Facebook Login button to connect to Facebook (with an account that can publish post on the page) from their website,
they complete a form
when the form is submitted, an article is created on the website AND a post is created on the FaceBook Page.
I ask for publish_action permission and manage_page permission when the user connects.
Those permissions need a review from Facebook, so I ask for it but the FB team says that I "only need those permissions when I use a public-facing Login". Is that not the case?
Currently, my app only work when I connect with the account that created the app.
You do need those permissions, but if the App is for your client only you don´t need to get them reviewed. Just add your client as Admin, Developer or Tester of your App and the permissions will work for him without review.
Facebook keeps rejecting my read action each time I submit it.
Please note that my open graph application functionality includes the deletion of an article as that is required by facebook.
you can visit my website at www.heyngine.com
Please advice
If you are using the Read action on your website, you must use the build-in read action (news.reads) and not create your own action for the same thing. Facebook will reject your action if its a duplicate of a build-in action.
Secondly, when you login to Facebook via your site, it doesn't ask for the publish_action permission. This is required to publish actions to Facebook. Without this, your read action will not get published to the user's profile. Also, why are the 'Social On/Off' and 'Delete' buttons visible when I'm not logged into your website via Facebook?
Facebook Documentation / Policy says the user must have a separate 'logged in' experience to logged out users. I.e. Facebook Users should only see 'Social On/Off' and 'Delete' once they have connected to your site via Facebook, not before as you do currently.
I'm browsing some news sites and most of them have the option of posting the link on your facebook wall. Or retweeting it. Or to other social media sites.
How do they get the user to authenticate themselves? I just push a button and it asks me to log in, and then it creates a new post on my facebook wall.
I want to reproduce this behavior but don't know where to start.
Read the facebook information for developers here It allows you to create actions that users can do on your site like reading an article or post a photo and it will add it to their facebook profile. There is also the capability for users to register or login to your site using their facebook credentials.
Similarly go here for twitter.
These sites are all using OAuth. It basically involves the transaction of a request for an access token from the site you are logging in through. Your users validate that they approve the validity of your request by authenticating with the third party system such as Twitter or Facebook and then these systems return a token that allows you to read/write/modify user data from these sites on their behalf.
We have users that logged in to our website through Facebook Connect. Now we'd like to contact those users about changes as we indicated in the signup process, but we don't have their email addresses. Only their Facebook ids.
How can we contact them? I understand Facebook removed 3rd parties' ability to send notifications through Facebook's API. We can send them a message through the API either.
So I guess we're left with posting to their wall from a user account of ours. I assume there's a low limit to how often we're allowed to do that and is that even permitted? Or we can make an application request from this designated facebook user account which would show up in their notifications.
Finally, we could manually go to the user's profile page and then click the "send a message" button from our facebook user account... A lot of manual work and I assume this is frowned upon as well. Is there an easy way to find out the profile page URL from a Facebook id?
What's the best approach here where we don't break any rules?
If you are getting stream_publish extended permission in your profile then you can simply post on there wall see this http://developers.facebook.com/docs/reference/rest/stream.publish/
Alternatively this can be a better solution if the user do not granted any extended permission
http://developers.facebook.com/docs/reference/rest/livemessage.send/
you should get "offline_access" from the facebook user requests to post at anytime.