权限问题
从 facebook graph api explorer https://developers.facebook.com/tools/explorer 我生成了一个令牌,无需请求任何许可。通过查看个人资料我居然看到了所有的教育背景、工作经历,这是不对的!
token permission:
{
"data": [
{
"installed": 1,
"type": "permissions"
}
]
}
又做了一次测试 1. 从 Facebook 中删除我的测试应用程序 2. 未经任何许可从我的网站连接到测试应用程序 3.获取令牌 4.进行图形API调用/me 5. 获取很多我没有问到的信息,例如教育、工作经历、电子邮件、家乡...
测试令牌权限,它只显示
{
"data": [
{
"installed": 1,
"type": "permissions"
}
]
}
任何想法?
From facebook graph api explorer https://developers.facebook.com/tools/explorer I generated a token, without asking any permission. By view the profile I actually see all education, work history, this is not right!
token permission:
{
"data": [
{
"installed": 1,
"type": "permissions"
}
]
}
Did another test
1. remove my test app from facebook
2. connected to test app from my website without ask any permission
3. get the token
4. make graph api call /me
5. get a lot information I didn't ask, e.g. education, work history, email, hometown...
test the token permission, it only show
{
"data": [
{
"installed": 1,
"type": "permissions"
}
]
}
any idea?
也许调用
https://graph.facebook.com/user_id_OR_username
不仅会检索基本信息,还会检索在隐私设置中设置为公开的所有信息。PS:阅读问题评论。
Maybe calling
https://graph.facebook.com/user_id_OR_username
would not only retrieve basic information but all your info set to public in the privacy settings.P.S.: read question comments.