SlideShare une entreprise Scribd logo
1  sur  40
Télécharger pour lire hors ligne
Facebook Open Graph Authentication
To Get Access Permission


                                   Writer : Seunghyun Seo
                               Contact: tgnice@nchovy.com
                                 tgnice@programming.or.kr
Facebook Open Graph Authentication
Contents
► Introduction
► Access Token
► Permission
► Graph API
► Appendix
► References
Introduction
Abstract
Introduction
 Open Graph is Core Concept in Facebook

 The Graph API is the core of Facebook
  Platform for Development
   ► Open Graph Theory


 Authentication
   ► Facebook authentication enables your app to interact
     with the Graph API on behalf of Facebook users and
     provides a powerful single-sign on mechanism across
     Web, mobile, and desktop apps.


 Tools For Developer
   ► Insights, Graph API Explorer, JavaScript Test Console,
     Test Users, URL Linter .
Access Token



PAGE ## | DATE
Access Token
 Authenticating as an Application allows your application to
  obtain an App Access Token.

 Obtain an App Access Token.
   ► The API will respond with a query-string formatted string of the form.
   ► You should parse this string, and use the value in the access_token
     parameter to to the API.
   ► App access tokens do not expire unless you refresh you app's App
     Secret.


 Make requests to the API.
   ► An app access token allows you to make requests as an application,
     not a user.
   ► To retrieve the details of your application, perform an HTTP GET.
   ► To read your applications insights data, perform an HTTP GET.


 String Format
   ► Https://[REDIRECTURL]#access_token=[ACCESS_TOKEN]
Access Token
 2012, May, 2 offline_access Permission will be eliminated.

 Allow Other way.- Handling Expired Access Tokens.


 Currently the long-lived user access_token will be valid for
  60 days while the short-lived user access_tokens are valid
  from 1 to 2 hours.
Permission



PAGE ## | DATE
Permission
 By default, when authorizing your application, a user only
  grants your app access to their basic information.

 If you want to read additional data or write data to Facebook,
  you need to request additional permissions.

 In the various authentication flows, you should specify the
  additional permissions you require using the scope parameter.

 To see which additional permissions you can request, and the
  access they offer you, see the Permissions reference.
Permission
 Basic Information
   ► Id, name, picture, gender, locale, Friends Connection, Public Data


 User and Friend Permissions

 Extended Permissions
   ► Individually user-revocable.


 Open Graph Permission
   ► To Publish Action


 Page Permission
   ► Manage User’s Page
Permission
User Permission          Friends Permission          Description

user_about_me            friends_about_me            Provides access to the "About Me" section of the profile in the
                                                     about property

user_activities          friends_activities          Provides access to the user's list of activities as the activities
                                                     connection(belong to Likes)


user_birthday            friends_birthday            Provides access to the birthday with year as the birthday
                                                     property


user_checkins            friends_checkins            Provides read access to the authorized user's check-ins or a
                                                     friend's check-ins that the user can see. This permission is
                                                     superseded by user_status for new applications as of
                                                     March, 2012.

user_education_history   friends_education_history   Provides access to education history as the education property


user_events              friends_events              Provides access to the list of events the user is attending as
                                                     the events connection
Permission
User Permission   Friends Permission   Description

user_groups       friends_groups       Provides access to the list of groups the user is a member of as
                                       the groups connection

user_hometown     friends_hometown     Provides access to the user's hometown in the hometown
                                       property


user_interests    friends_interests    Provides access to the user's list of interests as the interests
                                       connection(belong to Likes)


user_likes        friends_likes        Provides access to the list of all of the pages the user has liked
                                       as the likes connection


user_location     friends_location     Provides access to the user's current location as the location
                                       property

user_notes        friends_notes        Provides access to the user's notes as the notes connection
Permission
User Permission             Friends Permission            Description

user_photos                 friends_photos                Provides access to the photos the user has uploaded, and
                                                          photos the user has been tagged in

user_questions              friends_questions             Provides access to the questions the user or friend has asked



user_relationships          friends_relationships         Provides access to the user's family and personal
                                                          relationships and relationship status


user_relationship_details   friends_relationship_detail   Provides access to the user's relationship preferences
                            s


user_religion_politics      friends_religion_politics     Provides access to the user's religious and political
                                                          affiliations

user_status                 friends_status                Provides access to the user's status messages and check-ins.
                                                          Please see the documentation for the location_post. you were t
                                                          agged in the Post, a friend was tagged in the Post, you authore
                                                          d the Post, a friend authored the Post
Permission
User Permission     Friends Permission     Description

user_videos         friends_videos         Provides access to the videos the user has uploaded, and
                                           videos the user has been tagged in(belong to Likes)

user_website        friends_website        Provides access to the user's web site URL



user_work_history   friends_work_history   Provides access to work history as the work property



email               N/A                    Provides access to the user's primary email address in the
                                           email property. Do not spam users. Your use of email must
                                           comply both with Facebook policies and with the CAN-SPAM
                                           Act.
Permission
Graph API
Graph API
Method                Description                                 Argument

/PROFILE_ID/feed      Publish a new post on the given profile's   message, picture, link, name, caption,
                      feed/wall                                   description, source, place, tags

/OBJECT_ID/comments   Comment on the given object (if it has a    message
                      /comments connection)

/OBJECT_ID/likes      Like the given object (if it has a /likes   none
                      connection)
                      Everything have object ID. But, There is
                      no object in “Comment likes”. it just
                      show like count.

/PROFILE_ID/notes     Publish a note on the given profile         message, subject


/PROFILE_ID/links     Publish a link on the given profile         link, message, picture, name, caption,
                                                                  description

/PROFILE_ID/events    Create an event                             name, start_time, end_time



 Format
    ► Https://graph.facebook.com/ID/Connection?access_token=[ACCESSTOKEN]
    ► Connection that you can use is Explained by Chart
Graph API
 Method                     Description                          Argument

/EVENT_ID/attending        RSVP "attending" to the given event   none


/EVENT_ID/maybe            RSVP "maybe" to the given event       none


/EVENT_ID/declined         RSVP "declined" to the given event    none


/PROFILE_ID/albums         Create an album                       name, message


/ALBUM_ID/photos           Upload a photo to an album            message, source, place (multipart/form-data)


/PROFILE_ID/checkins       Create a check-in at a location       coordinates, place, message, tags
                           represented by a Page




 Before 2012. 5. 2. Your Wall is Yours, but post that made of others is not your permission. That
  is not yours. it has friends Permission
 After 2012. 5.2. Facebook Change Privacy Policy. Removed offline Permission. And You can
  Access Friend’s Post in Your Wall.
Open Graph Object
Open Graph Object
 List of Open Graph Object

 Object        Description                        Object       Description

Achievement   Instance for an achievement for a   Album        A Photo Album
              user

Application   An Application Registered on        Checkin      A checkin made Through Facebook
              Facebook Platform                                Place or the Graph API

Comment       A Comment on a Graph API object     Domain       A Website Domain within the Graph API


Event         A Facebook Event                    FriendList   A Facebook Friend List. This object
                                                               represents the list itself and not the
                                                               members of the list.

Group         A Facebook Group                    Insight      Statistics About Applications, Pages, or
                                                               Domain

Link          A Shared Link                       Message      A message in a Thread


Note          A Facebook Note                     Offer        An Offer Published by a Page
Open Graph Object

Object         Description                           Object           Description

Order          An order object associated with       Page             A Facebook Page
               facebook credit

Photo          An Individual Photo within an         Post             An Individual entry in a profile’s feed
               Album

Question       A Question Asked by a user, as        QuestionOption   An Option Aloowed as an answer to a
               represented in the graph API                           question

Review         A Review for an application           Status message   A status message on a user’s wall


Subscription   A subscription to an application to   Thread           A message thread
               get real-time updates an Graph
               object type

user           A user profile                        video            An individual video
Appendix
Chart, Infographics
Chart
Achievement Object Properties
The achievement(Instance) object represents the achievement achieved by a user for a particular app.


 Object             Description                          Permission         Return Value

 Id                Id of the achievement(instance)      app or user        String(Single object is Always String)
                                                        access_token

 From              The user who achieved the            app or user        JSON Object containing(id, name)
                   achievement                          access_token

 Created_time      Time at which the achievement        app or user        String containing an ISO-8601 date time
                   was achieved                         access_token

 Application       The application in which the user    app or user        JSON Object containing(id, name)
                   achieved the achievement             access_token

 Achievement       The achievement object that the      app or user        JSON Object containing(id, url, type, title)
                   user achieved                        access_token

 likes             likes received by the story          app or user        JSON Object contained[count of likes,
                                                        access_token       JSON Object Array containing(id, name) ]

 comments          Comments received by the             app or user        JSON Object containing Comments
                   achievement story                    access_token       Object(count of comment, JSON Object
                                                                           From, message, Created time)
Chart
Album Object Properties#1
If an app lets a user choose an album when uploading photos, the app should check the can_upload flag to be sure that
the app is allowed to add new photos to the album.

Object            Description                           Permission                 Return Value

Id               The Album ID                          Any valid access_token      String(Single object is Always String)
                                                       or user_photos or
                                                       friend_photos

From             The Profile that created this Album   Any valid                   JSON Object containing(id, name)
                                                       access_token

Name             The Title of the Album                Any valid access_token or   String
                                                       user_photos or
                                                       friend_photos


Description      The Descriprtion of the album         the same as above           String


Location         The Location of the Album                                         String


Link             A Link to this Album on Facebook                                  String(Valid URL)
Chart
Album Object Properties#2

 Object        Description                        Permission          Return Value

Cover_Photo    A Link to this Album on Facebook   the same as above   String


Privacy        The Privacy Setting for the                            String
               Album

Count          The Number of Photos in this                           String
               Album

Type           The Type of the Album                                  String( Profile , Mobile Wall, Normal )


Created_Time   The Time the Photo Album was                           String containing an ISO-8601 date time
               initially created

Updated_Time   The Last Time the Photo Album                          String containing an ISO-8601 date time
               was updated

Can_Uploaded   Determines whether the UID can                         Boolean
               upload to the album and returns
               true
Chart
Album Object Connections
The Album object has the following connections. Connections give Specific URL for to obtain JSON
Object.



 Name            Description                         Permission          Return Value

Photos          The Photos caontained in this        Any valid           JSON Array Object of Photo
                album                                access_token or
                                                     user_photos or
                                                     friend_photos

Likes           The Likes made on this album         the same as above   JSON Object Containing(id, from,
                                                                         message, created_time)

Comments        The Comments made on this                                JSON Array Object Containing(id, name)
                album

Pictures        The Album’s cover Photo, the                             HTTP 302 redirect to URL of the album's
                first picture uploaded to an album                       cover picture
                becomes the cover photo for the
                album.
Chart
Checkin Object Properties#1
A Checkin represents a single visit by a user to a location. The User and Page objects have checkin connections. The
behavior of Checkins is affected by the "Include Checkins with Statuses" migration setting.



 Object            Description                           Permission           Return Value

 Id               The checkin ID                         user_checkins        String(Single object is Always String)


 From             The ID and name of the user who        the same as          JSON Object containing(id, name)
                  made the checkin                       above

 Tags             The users the author tagged in the                          JSON Array Object containing(id, name)
                  checkin

 place            Information about the Facebook                              JSON Object containing[id, name,
                  Page that represents the location of                        JSON Object location containing(latitude,
                  the checkin                                                 longitude)]

 Application      Information about the application                           JSON Object containing(id, name,
                  that made the checkin                                       Canvas name, namespace)
Chart
Checkin Object Properties#2


 Object        Description                        Permission          Return Value

Created_time   The time the checkin was           the same as above   String containing an ISO-8601 date time
               created

Like           Users who like the checkin                             JSON Array Object containing(id, name)


Message        The Message the user added to                          String
               the checkin

Comments       All of the Comments on this link                       JSON Array Object containing(id, from,
                                                                      message, created_time)

Type           The Type of this object; always                        String
               return checkin
Chart
Checkin Object Connections
The Album object has the following connections. Connections give Specific URL for to obtain JSON
Object.



 Name            Description                   Permission            Return Value

Comments        All of the comments on this    user_checkins or      JSON Array Object Containing(id, from,
                checkin.                       friends_checkins as   message, created_time)
                                               appropriate

Likes           Users who like this checkin.   user_checkins or      JSON Object Containing(id, name)
                                               friends_checkins as
                                               appropriate
Chart
Comment Object Properties#1
A comment on Feed




 Object         Description                         Permission     Return Value

Id              The Facebook ID of the comment      generic        String(Single object is Always String)
                                                    access_token

From            The user that created the comment   the same as    JSON Object containing(id, name)
                                                    above

Message         The comment text                                   String


Created_Time    The timedate the comment was                       String containing an ISO-8601 date time
                created

Likes           The number of times this comment                   Integer
                was liked
Chart
Comment Object Properties#2


 Object         Description                           Permission     Return Value

 User_likes    This Field is returned only if the    Generic         String(always true)
               authenticated user likes this         access_token
               comment

 type          The Type of this object; always       Generic         String
               returns comment                       access_token



Comment Object Connections
The Comment object has the following connections.



Name            Description                         Permission      Return Value

likes          All of the likes on this comment     Any valid       JSON Array Object Containing(id, name)
                                                    access_token
Chart
Domain Object Properties
A web site domain within the Graph API. To register your own Domain, you must claim your domain name using
Facebook Insights.



 Object           Description                          Permission          Return Value

 Id               The ID of the domain                No access_token      String(Single object is Always String)
                                                      required

 name             The name of the domain              No access_token      String(Single object is Always String)
                                                      required
Chart
Event Object Properties#1
A Checkin represents a single visit by a user to a location. The User and Page objects have checkin connections. The
behavior of Checkins is affected by the "Include Checkins with Statuses" migration setting.



 Object            Description                           Permission           Return Value

 Id               The event ID                          generic               String(Single object is Always String)
                                                        access_token,
                                                        user_events or
                                                        friends_events

 Owner            The profile that created the event    the same as           JSON Object containing(id, name)
                                                        above

 Name             The event title                                             String(Single object is Always String)


 Description      The long-form description of the                            String(Single object is Always String)
                  event


 Start_time       The start time of the event, as you                         String containing an ISO-8601 date time
                  want it to be displayed on facebook
Chart
Event Object Properties#2


 Object       Description                      Permission          Return Value

End_time      The end time of the event, as    the same as above   String containing an ISO-8601 date time
              you want it to be displayed on
              facebook

Location      The location for this event                          String


venue         The location of this event                           JSON Array Object containing(id, street,
                                                                   city, state, zip, country, latitude,
                                                                   longitude )

Privacy       The visibility of this event                         String(OPEN,CLOSED,SECRET)


Update_time   The last time the event was                          String containing an ISO-8601 date time
              updated
Chart
Event Object Connections#1



 Name        Description                     Permission          Return Value

Feed        This event's wall.               any valid           JSON Array of POST Object
                                             access_token,
                                             user_events or
                                             friends_events

Noreply     All of the users who have been   the same as above   JSON Object Containing(id, name,
            not yet responded to their                           rsvp_status)
            invitation to this event.

Invited     All of the users who have been                       JSON Object Containing(id, name,
            invited to this event.                               rsvp_status)


Attending   All of the users who are                             JSON Object Containing(id, name,
            attending this event.                                rsvp_status)
Chart
Event Object Connections#2



 Name        Description                       Permission          Return Value

Maybe       All of the users who have been     the same as above   JSON Object Containing(id, name,
            responded "Maybe" to their                             rsvp_status)
            invitation to this event.

Decline     All of the users who declined                          JSON Object Containing(id, name,
            their invitation to this event.                        rsvp_status)


Picture     The event's profile picture.                           Returns a HTTP 302 with the URL of the
                                                                   event's picture


video       The videos uploaded to an event.   valid user          JSON Array of Video Object
                                               access_token
Chart
FriendList Object Properties


 Object         Description                                              Permission            Return Value

ID             The friend list ID                                        read_friendlists     String(always true)


Name           The name of the friend list                               the same as above    String


List_type      The type of the friends list; Possible values are:                             String
               close_friends, acquaintances, restricted, user_created,
               education, work, current_city or family


FriendList Object Connections
The Comment object has the following connections.


Name            Description                         Permission            Return Value

Member         All of the users who are            read_friendlists       JSON Array Object Containing(id, name)
               members of this list.
Infographics
References
Papers
Papers
Facebook Developer Page
https://developers.facebook.com/
http://ogp.me

Contenu connexe

En vedette

Open Graph & oEmbed | facebook的開放社交關係圖與其他網站的oEmbed
Open Graph & oEmbed | facebook的開放社交關係圖與其他網站的oEmbedOpen Graph & oEmbed | facebook的開放社交關係圖與其他網站的oEmbed
Open Graph & oEmbed | facebook的開放社交關係圖與其他網站的oEmbedVeronica Lin
 
Facebook Open Graph Api
Facebook Open Graph ApiFacebook Open Graph Api
Facebook Open Graph ApiSimon Li
 
Facebook Open Graph API
Facebook Open Graph APIFacebook Open Graph API
Facebook Open Graph APIColin Smillie
 
Graph API - Facebook Developer Garage Taipei
Graph API - Facebook Developer Garage TaipeiGraph API - Facebook Developer Garage Taipei
Graph API - Facebook Developer Garage TaipeiCardinal Blue Software
 
Gamify with SVG / Canvas over Facebook Open Graph
Gamify with SVG / Canvas over Facebook Open GraphGamify with SVG / Canvas over Facebook Open Graph
Gamify with SVG / Canvas over Facebook Open GraphPietro Polsinelli
 
Facebook open graph Presentation
Facebook open graph PresentationFacebook open graph Presentation
Facebook open graph PresentationIncheol Baek
 
Facebook open graph explained
Facebook open graph explainedFacebook open graph explained
Facebook open graph explainedSaint Social
 
Facebook Open Graph Protocol and Graph API (NoVA Code Camp 2010.1)
Facebook Open Graph Protocol and Graph API (NoVA Code Camp 2010.1)Facebook Open Graph Protocol and Graph API (NoVA Code Camp 2010.1)
Facebook Open Graph Protocol and Graph API (NoVA Code Camp 2010.1)Chris Busse
 
Facebook Open Graph Overview
Facebook Open Graph OverviewFacebook Open Graph Overview
Facebook Open Graph OverviewCory OBrien
 
Getting started with Facebook OpenGraph API
Getting started with Facebook OpenGraph APIGetting started with Facebook OpenGraph API
Getting started with Facebook OpenGraph APILynn Langit
 
Introduction to Facebook Graph API and OAuth 2
Introduction to Facebook Graph API and OAuth 2Introduction to Facebook Graph API and OAuth 2
Introduction to Facebook Graph API and OAuth 2Thai Pangsakulyanont
 
Facebook Login & Open Graph Introduction
Facebook Login & Open Graph IntroductionFacebook Login & Open Graph Introduction
Facebook Login & Open Graph IntroductionEric Ping
 
Facebook graph api
Facebook graph apiFacebook graph api
Facebook graph apiFagner Moura
 
Enhance existing REST APIs (e.g. Facebook Graph API) with code completion us...
Enhance existing REST APIs  (e.g. Facebook Graph API) with code completion us...Enhance existing REST APIs  (e.g. Facebook Graph API) with code completion us...
Enhance existing REST APIs (e.g. Facebook Graph API) with code completion us...johannes_fiala
 
Facebook Open Graph API and How To Use It
Facebook Open Graph API and How To Use ItFacebook Open Graph API and How To Use It
Facebook Open Graph API and How To Use ItAayush Shrestha
 
Facebook Open Graph meta tags
Facebook Open Graph meta tagsFacebook Open Graph meta tags
Facebook Open Graph meta tagsStudioDeOorzaak
 
Facebook ( Open ) Graph and the Semantic Web
Facebook ( Open ) Graph and the Semantic WebFacebook ( Open ) Graph and the Semantic Web
Facebook ( Open ) Graph and the Semantic WebMatteo Brunati
 
Facebook Open Graph and the Future of Personalization
Facebook Open Graph and the Future of PersonalizationFacebook Open Graph and the Future of Personalization
Facebook Open Graph and the Future of PersonalizationRob Gonda
 

En vedette (19)

Open Graph & oEmbed | facebook的開放社交關係圖與其他網站的oEmbed
Open Graph & oEmbed | facebook的開放社交關係圖與其他網站的oEmbedOpen Graph & oEmbed | facebook的開放社交關係圖與其他網站的oEmbed
Open Graph & oEmbed | facebook的開放社交關係圖與其他網站的oEmbed
 
Facebook Open Graph Protocol
Facebook Open Graph ProtocolFacebook Open Graph Protocol
Facebook Open Graph Protocol
 
Facebook Open Graph Api
Facebook Open Graph ApiFacebook Open Graph Api
Facebook Open Graph Api
 
Facebook Open Graph API
Facebook Open Graph APIFacebook Open Graph API
Facebook Open Graph API
 
Graph API - Facebook Developer Garage Taipei
Graph API - Facebook Developer Garage TaipeiGraph API - Facebook Developer Garage Taipei
Graph API - Facebook Developer Garage Taipei
 
Gamify with SVG / Canvas over Facebook Open Graph
Gamify with SVG / Canvas over Facebook Open GraphGamify with SVG / Canvas over Facebook Open Graph
Gamify with SVG / Canvas over Facebook Open Graph
 
Facebook open graph Presentation
Facebook open graph PresentationFacebook open graph Presentation
Facebook open graph Presentation
 
Facebook open graph explained
Facebook open graph explainedFacebook open graph explained
Facebook open graph explained
 
Facebook Open Graph Protocol and Graph API (NoVA Code Camp 2010.1)
Facebook Open Graph Protocol and Graph API (NoVA Code Camp 2010.1)Facebook Open Graph Protocol and Graph API (NoVA Code Camp 2010.1)
Facebook Open Graph Protocol and Graph API (NoVA Code Camp 2010.1)
 
Facebook Open Graph Overview
Facebook Open Graph OverviewFacebook Open Graph Overview
Facebook Open Graph Overview
 
Getting started with Facebook OpenGraph API
Getting started with Facebook OpenGraph APIGetting started with Facebook OpenGraph API
Getting started with Facebook OpenGraph API
 
Introduction to Facebook Graph API and OAuth 2
Introduction to Facebook Graph API and OAuth 2Introduction to Facebook Graph API and OAuth 2
Introduction to Facebook Graph API and OAuth 2
 
Facebook Login & Open Graph Introduction
Facebook Login & Open Graph IntroductionFacebook Login & Open Graph Introduction
Facebook Login & Open Graph Introduction
 
Facebook graph api
Facebook graph apiFacebook graph api
Facebook graph api
 
Enhance existing REST APIs (e.g. Facebook Graph API) with code completion us...
Enhance existing REST APIs  (e.g. Facebook Graph API) with code completion us...Enhance existing REST APIs  (e.g. Facebook Graph API) with code completion us...
Enhance existing REST APIs (e.g. Facebook Graph API) with code completion us...
 
Facebook Open Graph API and How To Use It
Facebook Open Graph API and How To Use ItFacebook Open Graph API and How To Use It
Facebook Open Graph API and How To Use It
 
Facebook Open Graph meta tags
Facebook Open Graph meta tagsFacebook Open Graph meta tags
Facebook Open Graph meta tags
 
Facebook ( Open ) Graph and the Semantic Web
Facebook ( Open ) Graph and the Semantic WebFacebook ( Open ) Graph and the Semantic Web
Facebook ( Open ) Graph and the Semantic Web
 
Facebook Open Graph and the Future of Personalization
Facebook Open Graph and the Future of PersonalizationFacebook Open Graph and the Future of Personalization
Facebook Open Graph and the Future of Personalization
 

Similaire à Facebook permission

Aplicações Sociais - Facebook
Aplicações Sociais - FacebookAplicações Sociais - Facebook
Aplicações Sociais - FacebookGabriel Lucas
 
Microsoft identity platform developer community call-October 2019
Microsoft identity platform developer community call-October 2019Microsoft identity platform developer community call-October 2019
Microsoft identity platform developer community call-October 2019Microsoft 365 Developer
 
Project LinkedList - LinkStack - A Social Media Reference Tool
Project LinkedList - LinkStack -  A Social Media Reference ToolProject LinkedList - LinkStack -  A Social Media Reference Tool
Project LinkedList - LinkStack - A Social Media Reference ToolSiddhantDixit6
 
Alphageeks meetup - facebook api
Alphageeks meetup - facebook apiAlphageeks meetup - facebook api
Alphageeks meetup - facebook apiAlphageeks
 
Profiles and permission sets in salesforce
Profiles and permission sets in salesforceProfiles and permission sets in salesforce
Profiles and permission sets in salesforceSunil kumar
 
Securing your APIs with OAuth, OpenID, and OpenID Connect
Securing your APIs with OAuth, OpenID, and OpenID ConnectSecuring your APIs with OAuth, OpenID, and OpenID Connect
Securing your APIs with OAuth, OpenID, and OpenID ConnectManish Pandit
 
Yrals Facebook Application For SME's
Yrals Facebook Application For SME'sYrals Facebook Application For SME's
Yrals Facebook Application For SME'sRochelle Pereira
 
Salesforce chatter api_developer_cheatsheet
Salesforce chatter api_developer_cheatsheetSalesforce chatter api_developer_cheatsheet
Salesforce chatter api_developer_cheatsheetshankarsfdc3
 
How to measure Twitter
How to measure TwitterHow to measure Twitter
How to measure TwitterTriptease
 
Palestra na Conferência Crowdsourcing 2013 #Ccsbr2013
Palestra na Conferência Crowdsourcing 2013 #Ccsbr2013 Palestra na Conferência Crowdsourcing 2013 #Ccsbr2013
Palestra na Conferência Crowdsourcing 2013 #Ccsbr2013 Trianons
 
Fb social api
Fb social apiFb social api
Fb social api毅 方
 
Introduction to OAuth2
Introduction to OAuth2 Introduction to OAuth2
Introduction to OAuth2 Sean Whitesell
 
Slide dari FB Sore gw di thinkweb
Slide dari FB Sore gw di thinkwebSlide dari FB Sore gw di thinkweb
Slide dari FB Sore gw di thinkwebKhalid Deh
 
Why Brands should Listen to Social Media conversations
Why Brands should Listen to Social Media conversations Why Brands should Listen to Social Media conversations
Why Brands should Listen to Social Media conversations Webenza India Pvt. Ltd
 
OAuth Introduction
OAuth IntroductionOAuth Introduction
OAuth Introductionh_marvin
 

Similaire à Facebook permission (20)

Aplicações Sociais - Facebook
Aplicações Sociais - FacebookAplicações Sociais - Facebook
Aplicações Sociais - Facebook
 
Microsoft identity platform developer community call-October 2019
Microsoft identity platform developer community call-October 2019Microsoft identity platform developer community call-October 2019
Microsoft identity platform developer community call-October 2019
 
Project LinkedList - LinkStack - A Social Media Reference Tool
Project LinkedList - LinkStack -  A Social Media Reference ToolProject LinkedList - LinkStack -  A Social Media Reference Tool
Project LinkedList - LinkStack - A Social Media Reference Tool
 
Alphageeks meetup - facebook api
Alphageeks meetup - facebook apiAlphageeks meetup - facebook api
Alphageeks meetup - facebook api
 
Profiles and permission sets in salesforce
Profiles and permission sets in salesforceProfiles and permission sets in salesforce
Profiles and permission sets in salesforce
 
Scheduler
SchedulerScheduler
Scheduler
 
Securing your APIs with OAuth, OpenID, and OpenID Connect
Securing your APIs with OAuth, OpenID, and OpenID ConnectSecuring your APIs with OAuth, OpenID, and OpenID Connect
Securing your APIs with OAuth, OpenID, and OpenID Connect
 
Yrals Facebook Application For SME's
Yrals Facebook Application For SME'sYrals Facebook Application For SME's
Yrals Facebook Application For SME's
 
Salesforce chatter api_developer_cheatsheet
Salesforce chatter api_developer_cheatsheetSalesforce chatter api_developer_cheatsheet
Salesforce chatter api_developer_cheatsheet
 
Family tree
Family treeFamily tree
Family tree
 
How to measure Twitter
How to measure TwitterHow to measure Twitter
How to measure Twitter
 
Constellate
ConstellateConstellate
Constellate
 
Palestra na Conferência Crowdsourcing 2013 #Ccsbr2013
Palestra na Conferência Crowdsourcing 2013 #Ccsbr2013 Palestra na Conferência Crowdsourcing 2013 #Ccsbr2013
Palestra na Conferência Crowdsourcing 2013 #Ccsbr2013
 
Fb social api
Fb social apiFb social api
Fb social api
 
Fiddling with flickr
Fiddling with flickrFiddling with flickr
Fiddling with flickr
 
Introduction to OAuth2
Introduction to OAuth2 Introduction to OAuth2
Introduction to OAuth2
 
Slide dari FB Sore gw di thinkweb
Slide dari FB Sore gw di thinkwebSlide dari FB Sore gw di thinkweb
Slide dari FB Sore gw di thinkweb
 
Prashant Sridharan
Prashant SridharanPrashant Sridharan
Prashant Sridharan
 
Why Brands should Listen to Social Media conversations
Why Brands should Listen to Social Media conversations Why Brands should Listen to Social Media conversations
Why Brands should Listen to Social Media conversations
 
OAuth Introduction
OAuth IntroductionOAuth Introduction
OAuth Introduction
 

Facebook permission

  • 1. Facebook Open Graph Authentication To Get Access Permission Writer : Seunghyun Seo Contact: tgnice@nchovy.com tgnice@programming.or.kr
  • 2. Facebook Open Graph Authentication Contents ► Introduction ► Access Token ► Permission ► Graph API ► Appendix ► References
  • 4. Introduction  Open Graph is Core Concept in Facebook  The Graph API is the core of Facebook Platform for Development ► Open Graph Theory  Authentication ► Facebook authentication enables your app to interact with the Graph API on behalf of Facebook users and provides a powerful single-sign on mechanism across Web, mobile, and desktop apps.  Tools For Developer ► Insights, Graph API Explorer, JavaScript Test Console, Test Users, URL Linter .
  • 6. Access Token  Authenticating as an Application allows your application to obtain an App Access Token.  Obtain an App Access Token. ► The API will respond with a query-string formatted string of the form. ► You should parse this string, and use the value in the access_token parameter to to the API. ► App access tokens do not expire unless you refresh you app's App Secret.  Make requests to the API. ► An app access token allows you to make requests as an application, not a user. ► To retrieve the details of your application, perform an HTTP GET. ► To read your applications insights data, perform an HTTP GET.  String Format ► Https://[REDIRECTURL]#access_token=[ACCESS_TOKEN]
  • 7. Access Token  2012, May, 2 offline_access Permission will be eliminated.  Allow Other way.- Handling Expired Access Tokens.  Currently the long-lived user access_token will be valid for 60 days while the short-lived user access_tokens are valid from 1 to 2 hours.
  • 9. Permission  By default, when authorizing your application, a user only grants your app access to their basic information.  If you want to read additional data or write data to Facebook, you need to request additional permissions.  In the various authentication flows, you should specify the additional permissions you require using the scope parameter.  To see which additional permissions you can request, and the access they offer you, see the Permissions reference.
  • 10. Permission  Basic Information ► Id, name, picture, gender, locale, Friends Connection, Public Data  User and Friend Permissions  Extended Permissions ► Individually user-revocable.  Open Graph Permission ► To Publish Action  Page Permission ► Manage User’s Page
  • 11. Permission User Permission Friends Permission Description user_about_me friends_about_me Provides access to the "About Me" section of the profile in the about property user_activities friends_activities Provides access to the user's list of activities as the activities connection(belong to Likes) user_birthday friends_birthday Provides access to the birthday with year as the birthday property user_checkins friends_checkins Provides read access to the authorized user's check-ins or a friend's check-ins that the user can see. This permission is superseded by user_status for new applications as of March, 2012. user_education_history friends_education_history Provides access to education history as the education property user_events friends_events Provides access to the list of events the user is attending as the events connection
  • 12. Permission User Permission Friends Permission Description user_groups friends_groups Provides access to the list of groups the user is a member of as the groups connection user_hometown friends_hometown Provides access to the user's hometown in the hometown property user_interests friends_interests Provides access to the user's list of interests as the interests connection(belong to Likes) user_likes friends_likes Provides access to the list of all of the pages the user has liked as the likes connection user_location friends_location Provides access to the user's current location as the location property user_notes friends_notes Provides access to the user's notes as the notes connection
  • 13. Permission User Permission Friends Permission Description user_photos friends_photos Provides access to the photos the user has uploaded, and photos the user has been tagged in user_questions friends_questions Provides access to the questions the user or friend has asked user_relationships friends_relationships Provides access to the user's family and personal relationships and relationship status user_relationship_details friends_relationship_detail Provides access to the user's relationship preferences s user_religion_politics friends_religion_politics Provides access to the user's religious and political affiliations user_status friends_status Provides access to the user's status messages and check-ins. Please see the documentation for the location_post. you were t agged in the Post, a friend was tagged in the Post, you authore d the Post, a friend authored the Post
  • 14. Permission User Permission Friends Permission Description user_videos friends_videos Provides access to the videos the user has uploaded, and videos the user has been tagged in(belong to Likes) user_website friends_website Provides access to the user's web site URL user_work_history friends_work_history Provides access to work history as the work property email N/A Provides access to the user's primary email address in the email property. Do not spam users. Your use of email must comply both with Facebook policies and with the CAN-SPAM Act.
  • 17. Graph API Method Description Argument /PROFILE_ID/feed Publish a new post on the given profile's message, picture, link, name, caption, feed/wall description, source, place, tags /OBJECT_ID/comments Comment on the given object (if it has a message /comments connection) /OBJECT_ID/likes Like the given object (if it has a /likes none connection) Everything have object ID. But, There is no object in “Comment likes”. it just show like count. /PROFILE_ID/notes Publish a note on the given profile message, subject /PROFILE_ID/links Publish a link on the given profile link, message, picture, name, caption, description /PROFILE_ID/events Create an event name, start_time, end_time  Format ► Https://graph.facebook.com/ID/Connection?access_token=[ACCESSTOKEN] ► Connection that you can use is Explained by Chart
  • 18. Graph API Method Description Argument /EVENT_ID/attending RSVP "attending" to the given event none /EVENT_ID/maybe RSVP "maybe" to the given event none /EVENT_ID/declined RSVP "declined" to the given event none /PROFILE_ID/albums Create an album name, message /ALBUM_ID/photos Upload a photo to an album message, source, place (multipart/form-data) /PROFILE_ID/checkins Create a check-in at a location coordinates, place, message, tags represented by a Page  Before 2012. 5. 2. Your Wall is Yours, but post that made of others is not your permission. That is not yours. it has friends Permission  After 2012. 5.2. Facebook Change Privacy Policy. Removed offline Permission. And You can Access Friend’s Post in Your Wall.
  • 20. Open Graph Object  List of Open Graph Object Object Description Object Description Achievement Instance for an achievement for a Album A Photo Album user Application An Application Registered on Checkin A checkin made Through Facebook Facebook Platform Place or the Graph API Comment A Comment on a Graph API object Domain A Website Domain within the Graph API Event A Facebook Event FriendList A Facebook Friend List. This object represents the list itself and not the members of the list. Group A Facebook Group Insight Statistics About Applications, Pages, or Domain Link A Shared Link Message A message in a Thread Note A Facebook Note Offer An Offer Published by a Page
  • 21. Open Graph Object Object Description Object Description Order An order object associated with Page A Facebook Page facebook credit Photo An Individual Photo within an Post An Individual entry in a profile’s feed Album Question A Question Asked by a user, as QuestionOption An Option Aloowed as an answer to a represented in the graph API question Review A Review for an application Status message A status message on a user’s wall Subscription A subscription to an application to Thread A message thread get real-time updates an Graph object type user A user profile video An individual video
  • 23. Chart Achievement Object Properties The achievement(Instance) object represents the achievement achieved by a user for a particular app. Object Description Permission Return Value Id Id of the achievement(instance) app or user String(Single object is Always String) access_token From The user who achieved the app or user JSON Object containing(id, name) achievement access_token Created_time Time at which the achievement app or user String containing an ISO-8601 date time was achieved access_token Application The application in which the user app or user JSON Object containing(id, name) achieved the achievement access_token Achievement The achievement object that the app or user JSON Object containing(id, url, type, title) user achieved access_token likes likes received by the story app or user JSON Object contained[count of likes, access_token JSON Object Array containing(id, name) ] comments Comments received by the app or user JSON Object containing Comments achievement story access_token Object(count of comment, JSON Object From, message, Created time)
  • 24. Chart Album Object Properties#1 If an app lets a user choose an album when uploading photos, the app should check the can_upload flag to be sure that the app is allowed to add new photos to the album. Object Description Permission Return Value Id The Album ID Any valid access_token String(Single object is Always String) or user_photos or friend_photos From The Profile that created this Album Any valid JSON Object containing(id, name) access_token Name The Title of the Album Any valid access_token or String user_photos or friend_photos Description The Descriprtion of the album the same as above String Location The Location of the Album String Link A Link to this Album on Facebook String(Valid URL)
  • 25. Chart Album Object Properties#2 Object Description Permission Return Value Cover_Photo A Link to this Album on Facebook the same as above String Privacy The Privacy Setting for the String Album Count The Number of Photos in this String Album Type The Type of the Album String( Profile , Mobile Wall, Normal ) Created_Time The Time the Photo Album was String containing an ISO-8601 date time initially created Updated_Time The Last Time the Photo Album String containing an ISO-8601 date time was updated Can_Uploaded Determines whether the UID can Boolean upload to the album and returns true
  • 26. Chart Album Object Connections The Album object has the following connections. Connections give Specific URL for to obtain JSON Object. Name Description Permission Return Value Photos The Photos caontained in this Any valid JSON Array Object of Photo album access_token or user_photos or friend_photos Likes The Likes made on this album the same as above JSON Object Containing(id, from, message, created_time) Comments The Comments made on this JSON Array Object Containing(id, name) album Pictures The Album’s cover Photo, the HTTP 302 redirect to URL of the album's first picture uploaded to an album cover picture becomes the cover photo for the album.
  • 27. Chart Checkin Object Properties#1 A Checkin represents a single visit by a user to a location. The User and Page objects have checkin connections. The behavior of Checkins is affected by the "Include Checkins with Statuses" migration setting. Object Description Permission Return Value Id The checkin ID user_checkins String(Single object is Always String) From The ID and name of the user who the same as JSON Object containing(id, name) made the checkin above Tags The users the author tagged in the JSON Array Object containing(id, name) checkin place Information about the Facebook JSON Object containing[id, name, Page that represents the location of JSON Object location containing(latitude, the checkin longitude)] Application Information about the application JSON Object containing(id, name, that made the checkin Canvas name, namespace)
  • 28. Chart Checkin Object Properties#2 Object Description Permission Return Value Created_time The time the checkin was the same as above String containing an ISO-8601 date time created Like Users who like the checkin JSON Array Object containing(id, name) Message The Message the user added to String the checkin Comments All of the Comments on this link JSON Array Object containing(id, from, message, created_time) Type The Type of this object; always String return checkin
  • 29. Chart Checkin Object Connections The Album object has the following connections. Connections give Specific URL for to obtain JSON Object. Name Description Permission Return Value Comments All of the comments on this user_checkins or JSON Array Object Containing(id, from, checkin. friends_checkins as message, created_time) appropriate Likes Users who like this checkin. user_checkins or JSON Object Containing(id, name) friends_checkins as appropriate
  • 30. Chart Comment Object Properties#1 A comment on Feed Object Description Permission Return Value Id The Facebook ID of the comment generic String(Single object is Always String) access_token From The user that created the comment the same as JSON Object containing(id, name) above Message The comment text String Created_Time The timedate the comment was String containing an ISO-8601 date time created Likes The number of times this comment Integer was liked
  • 31. Chart Comment Object Properties#2 Object Description Permission Return Value User_likes This Field is returned only if the Generic String(always true) authenticated user likes this access_token comment type The Type of this object; always Generic String returns comment access_token Comment Object Connections The Comment object has the following connections. Name Description Permission Return Value likes All of the likes on this comment Any valid JSON Array Object Containing(id, name) access_token
  • 32. Chart Domain Object Properties A web site domain within the Graph API. To register your own Domain, you must claim your domain name using Facebook Insights. Object Description Permission Return Value Id The ID of the domain No access_token String(Single object is Always String) required name The name of the domain No access_token String(Single object is Always String) required
  • 33. Chart Event Object Properties#1 A Checkin represents a single visit by a user to a location. The User and Page objects have checkin connections. The behavior of Checkins is affected by the "Include Checkins with Statuses" migration setting. Object Description Permission Return Value Id The event ID generic String(Single object is Always String) access_token, user_events or friends_events Owner The profile that created the event the same as JSON Object containing(id, name) above Name The event title String(Single object is Always String) Description The long-form description of the String(Single object is Always String) event Start_time The start time of the event, as you String containing an ISO-8601 date time want it to be displayed on facebook
  • 34. Chart Event Object Properties#2 Object Description Permission Return Value End_time The end time of the event, as the same as above String containing an ISO-8601 date time you want it to be displayed on facebook Location The location for this event String venue The location of this event JSON Array Object containing(id, street, city, state, zip, country, latitude, longitude ) Privacy The visibility of this event String(OPEN,CLOSED,SECRET) Update_time The last time the event was String containing an ISO-8601 date time updated
  • 35. Chart Event Object Connections#1 Name Description Permission Return Value Feed This event's wall. any valid JSON Array of POST Object access_token, user_events or friends_events Noreply All of the users who have been the same as above JSON Object Containing(id, name, not yet responded to their rsvp_status) invitation to this event. Invited All of the users who have been JSON Object Containing(id, name, invited to this event. rsvp_status) Attending All of the users who are JSON Object Containing(id, name, attending this event. rsvp_status)
  • 36. Chart Event Object Connections#2 Name Description Permission Return Value Maybe All of the users who have been the same as above JSON Object Containing(id, name, responded "Maybe" to their rsvp_status) invitation to this event. Decline All of the users who declined JSON Object Containing(id, name, their invitation to this event. rsvp_status) Picture The event's profile picture. Returns a HTTP 302 with the URL of the event's picture video The videos uploaded to an event. valid user JSON Array of Video Object access_token
  • 37. Chart FriendList Object Properties Object Description Permission Return Value ID The friend list ID read_friendlists String(always true) Name The name of the friend list the same as above String List_type The type of the friends list; Possible values are: String close_friends, acquaintances, restricted, user_created, education, work, current_city or family FriendList Object Connections The Comment object has the following connections. Name Description Permission Return Value Member All of the users who are read_friendlists JSON Array Object Containing(id, name) members of this list.