how do i get user access token from facebook graph api












0















so I'm trying to work with facebook graph API to auth users into my site
so here my steps as I understand.




  1. User clicks on my custom facebook button and the following get request is dispatch: https://www.facebook.com/v3.2/dialog/oauth?......


  2. Then, I'm getting the code from the following query string:
    https://localhost:4200/?code=...&state=...#=


  3. I sent the code to the server for exchange with an access token



 static async registerFacebook(req, res) {
try{
const params = {
client_id: '...',
client_secret: '...',
code: req.body.code,
grant_type: 'client_credentials',
redirect_uri: 'https://localhost:4200'
}
const headers = {
'Content-Type': 'application/x-www-form-urlencoded'
}
return _axios.post(`https://graph.facebook.com/v3.2/oauth/access_token?`,qs.stringify(params),headers)
.then(async response => {
console.log(response);
}).catch(e => console.log(e));
}catch(e){
const msg = e.hasOwnProperty('message') ? e.message : e;
res.json(ResponseService.errorResponse(msg));
}

}


and it works I got a response like that



  { access_token: 'myAppId|6viQYrjWkLT54OJC00iBMV5I7pR',
token_type: 'bearer' } }


and I'm really confused what's going on here cause I got my own app access token and not the current user access token please what did I miss here?



to be more clear it doesn't matter with which user I'm trying to auth I'm still getting the same access token



I tried to follow this https://developers.facebook.com/docs/facebook-login/manually-build-a-login-flow










share|improve this question


















  • 1





    I think the issue is that you have grant_type: 'client_credentials', there

    – Bnaya
    Jan 20 at 17:21
















0















so I'm trying to work with facebook graph API to auth users into my site
so here my steps as I understand.




  1. User clicks on my custom facebook button and the following get request is dispatch: https://www.facebook.com/v3.2/dialog/oauth?......


  2. Then, I'm getting the code from the following query string:
    https://localhost:4200/?code=...&state=...#=


  3. I sent the code to the server for exchange with an access token



 static async registerFacebook(req, res) {
try{
const params = {
client_id: '...',
client_secret: '...',
code: req.body.code,
grant_type: 'client_credentials',
redirect_uri: 'https://localhost:4200'
}
const headers = {
'Content-Type': 'application/x-www-form-urlencoded'
}
return _axios.post(`https://graph.facebook.com/v3.2/oauth/access_token?`,qs.stringify(params),headers)
.then(async response => {
console.log(response);
}).catch(e => console.log(e));
}catch(e){
const msg = e.hasOwnProperty('message') ? e.message : e;
res.json(ResponseService.errorResponse(msg));
}

}


and it works I got a response like that



  { access_token: 'myAppId|6viQYrjWkLT54OJC00iBMV5I7pR',
token_type: 'bearer' } }


and I'm really confused what's going on here cause I got my own app access token and not the current user access token please what did I miss here?



to be more clear it doesn't matter with which user I'm trying to auth I'm still getting the same access token



I tried to follow this https://developers.facebook.com/docs/facebook-login/manually-build-a-login-flow










share|improve this question


















  • 1





    I think the issue is that you have grant_type: 'client_credentials', there

    – Bnaya
    Jan 20 at 17:21














0












0








0








so I'm trying to work with facebook graph API to auth users into my site
so here my steps as I understand.




  1. User clicks on my custom facebook button and the following get request is dispatch: https://www.facebook.com/v3.2/dialog/oauth?......


  2. Then, I'm getting the code from the following query string:
    https://localhost:4200/?code=...&state=...#=


  3. I sent the code to the server for exchange with an access token



 static async registerFacebook(req, res) {
try{
const params = {
client_id: '...',
client_secret: '...',
code: req.body.code,
grant_type: 'client_credentials',
redirect_uri: 'https://localhost:4200'
}
const headers = {
'Content-Type': 'application/x-www-form-urlencoded'
}
return _axios.post(`https://graph.facebook.com/v3.2/oauth/access_token?`,qs.stringify(params),headers)
.then(async response => {
console.log(response);
}).catch(e => console.log(e));
}catch(e){
const msg = e.hasOwnProperty('message') ? e.message : e;
res.json(ResponseService.errorResponse(msg));
}

}


and it works I got a response like that



  { access_token: 'myAppId|6viQYrjWkLT54OJC00iBMV5I7pR',
token_type: 'bearer' } }


and I'm really confused what's going on here cause I got my own app access token and not the current user access token please what did I miss here?



to be more clear it doesn't matter with which user I'm trying to auth I'm still getting the same access token



I tried to follow this https://developers.facebook.com/docs/facebook-login/manually-build-a-login-flow










share|improve this question














so I'm trying to work with facebook graph API to auth users into my site
so here my steps as I understand.




  1. User clicks on my custom facebook button and the following get request is dispatch: https://www.facebook.com/v3.2/dialog/oauth?......


  2. Then, I'm getting the code from the following query string:
    https://localhost:4200/?code=...&state=...#=


  3. I sent the code to the server for exchange with an access token



 static async registerFacebook(req, res) {
try{
const params = {
client_id: '...',
client_secret: '...',
code: req.body.code,
grant_type: 'client_credentials',
redirect_uri: 'https://localhost:4200'
}
const headers = {
'Content-Type': 'application/x-www-form-urlencoded'
}
return _axios.post(`https://graph.facebook.com/v3.2/oauth/access_token?`,qs.stringify(params),headers)
.then(async response => {
console.log(response);
}).catch(e => console.log(e));
}catch(e){
const msg = e.hasOwnProperty('message') ? e.message : e;
res.json(ResponseService.errorResponse(msg));
}

}


and it works I got a response like that



  { access_token: 'myAppId|6viQYrjWkLT54OJC00iBMV5I7pR',
token_type: 'bearer' } }


and I'm really confused what's going on here cause I got my own app access token and not the current user access token please what did I miss here?



to be more clear it doesn't matter with which user I'm trying to auth I'm still getting the same access token



I tried to follow this https://developers.facebook.com/docs/facebook-login/manually-build-a-login-flow







facebook-graph-api






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Jan 20 at 12:02









Elad sarusiElad sarusi

6




6








  • 1





    I think the issue is that you have grant_type: 'client_credentials', there

    – Bnaya
    Jan 20 at 17:21














  • 1





    I think the issue is that you have grant_type: 'client_credentials', there

    – Bnaya
    Jan 20 at 17:21








1




1





I think the issue is that you have grant_type: 'client_credentials', there

– Bnaya
Jan 20 at 17:21





I think the issue is that you have grant_type: 'client_credentials', there

– Bnaya
Jan 20 at 17:21












0






active

oldest

votes











Your Answer






StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f54276229%2fhow-do-i-get-user-access-token-from-facebook-graph-api%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























0






active

oldest

votes








0






active

oldest

votes









active

oldest

votes






active

oldest

votes
















draft saved

draft discarded




















































Thanks for contributing an answer to Stack Overflow!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f54276229%2fhow-do-i-get-user-access-token-from-facebook-graph-api%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Callistus III

Ostreoida

Index Sanctorum