I cannot understand the FB API. I feel the problem is because I cannot understand the protocals OAouth draft page (source, page 19). Well firstly it was so but now I understand that OAouth 1.0 and OAuth 2.0 are totally different protocols although for the same goal, apparently..
Perhaps the most essential stuff are FB docs about authentication here and a blog post
here. I am trying to categorize here threads to dig deeper into the FB API.
That’s because you didn’t ask for them …
To get a user’s friends, you have to query the /userid/friends connection.
And for the user’s picture, you can just use the address https://graph.facebook.com/userid/picture as the image src – this will redirect to the actual picture.
It’s all described here: https://developers.facebook.com/docs/reference/api/user/ under „Connections”