Facebook graph api

graph api

fagner moura - @seufagner

old REST(?) apihttps://api.facebook.com/method/[name]

• users.hasAppPermission• users.isAppUser• users.getLoggedInUser• stream.publish ...



session_key



deprecatedsession_key

old REST apihttps://api.facebook.com/method/[name]


deprecatedsession_key

REST ?• easy SOA• resources• only HTTP• stateless

• lightweight• simple• readable

now, only json response

objects

objects

userpagemessagestatus messagephotovideo ...

objects

https://graph.facebook.com/ID


objects

https://graph.facebook.com/19292868552


objects

https://graph.facebook.com/plataform


userpagemessagestatus messagephotovideo ... objects

+connections

user@connections

homefeedpostsfriendspicturephotos ... user@connections

homefeedpostsfriendspicturephotos ...

(public data)

user@connections

https://graph.facebook.com/me/friends

https://graph.facebook.com/me/picture


(read_stream permission)

user@connections

https://graph.facebook.com/me/home

https://graph.facebook.com/me/feed



user@connections

session_token?



user@connections

access_token


(user_photos permission)

user@connections

access_token

grantpermissions

• oauth 2.0• server side• client side

• open protocol• authentication• widely used


grantpermissions

• oauth server• user• application

actors

server side flow

App try to accessFacebook

OAuth Dialog(App Authorization)

OAuth Dialog(User Authentication)

curl -F 'client_id=113391995351148' \-F 'redirect_uri=http://facebook-buraco-debug.jogatina.com.....' \https://www.facebook.com/dialog/oauth

server side flow



curl -F 'client_id=113391995351148' \-F 'redirect_uri=http://facebook-buraco-debug.jogatina.com.....' \-F 'scope=email, read_stream' \https://www.facebook.com/dialog/oauth


server side flow



Cookie not found, show OAuth Dialog (facebook layout)


server side flow



goes to App authorization directly


server side flow

access OAuth Dialog(App Authorization)


don´t allow !redirect with some params like: error_reason, error, etc.

HTTP 302(redirect_url param)

server side flow

access OAuth Dialog(App Authorization)


allow !

redirect with authorization code param


server side flow

Authorization) http://mydomain...

curl -F 'client_id=113391995351148' \-F 'redirect_uri=http://facebook-buraco-debug.jogatina.com.....' \-F 'client_secret=f8138690fe947221d4d2c071aa945395' \

-F 'code=[authorization code here]' \

https://graph.facebook.com/oauth/access_token


server side flow

{ "error": {"type": "OAuthException", "message": "Error validating verification code." }

}

HTTP 400Authorization) http://mydomain...

server side flow

Sucessfull authenticated !

access_token in the body of the request

HTTP 302(redirect_url param)Authorization) http://mydomain...


grantpermissions

client side flow

• desktop• mobile• javascript

HTTP requestOAuth Dialog(App Authorization)

client side flow

curl -F 'client_id=113391995351148' \-F 'redirect_uri=http://facebook-buraco-debug.jogatina.com.....' \-F ‘response_type=token' \https://www.facebook.com.br/dialog/oauth

HTTP request

client side flow


Pass URI fragment with access_tokenhttp://jogatina.com....#access_token=gzZ666a..&expires_in=64090

{ "error": {"type": "OAuthException", "message": "Error validating verification code." }

}

HTTP request

client side flow

HTTP 400

services available

• reading• searching• publishing• ...

curl -F ‘fields=id,name,picture' \-F ‘access_token=...' \https://graph.facebook.com/fagner.moura

services available


curl -F ‘q=futebol' \-F ‘type=user' \https://graph.facebook.com/search

services available


curl -F ‘message=Jogue no Jogatina hoje' \-F ‘access_token=...’ \https://graph.facebook.com/fagner.moura/feed

services available


paginginsights

deleting

real time update

:-)

fagner moura - @seufagner

Facebook graph api

Documents

Transcript of Facebook graph api