Facebook app - Do i need those permissions? - facebook

I created an app for my clients. They uses this app from their website to post on their Facebook Page (and as the Facebook Page).
they use a Facebook Login button to connect to Facebook (with an account that can publish post on the page) from their website,
they complete a form
when the form is submitted, an article is created on the website AND a post is created on the FaceBook Page.
I ask for publish_action permission and manage_page permission when the user connects.
Those permissions need a review from Facebook, so I ask for it but the FB team says that I "only need those permissions when I use a public-facing Login". Is that not the case?
Currently, my app only work when I connect with the account that created the app.

You do need those permissions, but if the App is for your client only you donĀ“t need to get them reviewed. Just add your client as Admin, Developer or Tester of your App and the permissions will work for him without review.

Related

Manage_pages permission for webhooks

We are trying to configure webhooks for one of Facebook page we are managing.
To use webhooks product in our app, we need manage_pages permission.
So, we have created the screencast & submitted for review.
It is being repeatedly rejected saying, 'Please show the Facebook pages managed by your website on your website'
Ours is a server-to-server app. We don't have a website through which we manage this page. We manage that page by logging in to Facebook directly via https://www.facebook.com
How can we get this kind of app (which uses manage_pages permission for webhooks only) reviewed? What are we missing? Can somebody help?

Facebook App Review - How to allow FB reviewer to test manage_pages permission?

I have an app that allows users of a (basically)WordPress site to share their posts to their Facebook business page (not user feed). Everything works great, I just have to submit the app to FB for review because I need the manage_pages and publish_pages permissions. How do I allow the Facebook reviewer to test this functionality when they need to have permissions attached to a FB page to be able to share a post to it?
I have created a login on my site for the reviewer. I have also created a test user on the app that the FB reviewer will be able to use, and I have used that test user to created a test page but the page is not accessible by my app or by any other user. The test page is set to Public. As I understand from what I've read in the FB docs, content by a test user (I'm assuming an FB business page qualifies as "content") is only visible to other test users. How can I set this up for FB to be able to review this?
As pointed out by CBroe, Facebook testers have their own pages with which to test permissions like this. I was over-worrying.

Link facebook messenger with facebook login on app

I have a facebook messenger bot that sends a webhook to my web app. People can login to my app via facebook login.
The first user contact is normally with my facebook bot on which they can create a profile. When they make contact I take their facebook id, name, profile pic, etc.
Users can then login with facebook to my web app to enhance their profile.
My problem is facebook uses different scoped ids for messenger and their login.
How can I recognise if a user has already been on my facebook bot if they use my web app, and vice verca.
I think it has something to do with the business mapping api: https://developers.facebook.com/docs/apps/for-business but I'm struggling to understand how it works.
I am sending a get request using:
GET /me?fields=token_for_business
But the docs do not specify the full url to use. I'm also unsure if you can use this in developer mode.
facebook provides an id-matching api
for the app and pages owned by the same business manager. More informations:
https://developers.facebook.com/docs/messenger-platform/identity/id-matching

How to publish as a Page without requesting extended permissions from a user?

I have one Facebook App that I only use to authenticate users on a website, get their names and profile pictures.
I also have a Facebook Page related to that same website.
My personal profile is administrator of both the App and the Page. Also the Page is registered as "App Page" in the advanced settings of the App.
I want to publish on the Page from a server using the Graph API and the credentials of the App without the need to ask for extended permissions such as manage_pages or publish_pages from my users because I don't need them (see point 1). I don't want to publish on their page, only on mine.
How do I make my App "administrator" of my Page so that no additional permission is required for the App to publish on behalve of the Page?
I know a quick and dirty solution would be to create another App that would be just used as a gateway between my profile and the Page (I would be the only user of the App, granting all the required permissions). But I would like to avoid having two different Apps.
If you want to publish "as Page" on your Page, you need to authorize your Facebook account with manage_pages and publish_pages and get a Page Token. That is the only way.
You can use an Extended Page Token and store it:
https://developers.facebook.com/docs/facebook-login/access-tokens
http://www.devils-heaven.com/facebook-access-tokens/

Linking a website account to a facebook account so the user can post from the website anytime

I'm using the javascript API to link a website account to a users facebook account but I'm not sure if I'm doing it the best/easiest way.
I've created a facebook app
Used the FB.ui feed option to allow the user to post to their timeline
This works fine but the ui will ask the user to login each time they start a new session on the website. Have I missed something? Do I need to store and use the User Access Token?