Question

I wonder is it possible to access user’s wall info without passing his/her access token?

for example, I will just pass my app secret token and app id. and FB user already allows to access his/her info from my app. Facebook does the checking and matching of my app and my app’s user by just using my app secret token and app id.

Because I found some topics similar to that.
http://forum.developers.facebook.net/viewtopic.php?pid=9172

When I check Rest FB doc,it says like that.
http://restfb.com/javadoc/index.html
public DefaultFacebookClient()
Creates a Facebook Graph API client with no access token.
Without an access token, you can view and search public graph data but can’t do much else.

I doubt that it will work or not without access token.
can everyone share me ideas or any possible similar approaches ?

Thanks.

Answer 1

You will need to ask the users to authorize your app for offline access. You will be able to access the user’s wall even if the user is offline, but you still need the access token. It is part of Facebook’s security measures.

There are two types of access tokens:

• Session based: expires in a short term, are used when the user will be logged to FB every time you need to perform an operation.
• Offline access: do not expire and allow the app to perform operations for the user in any moment. This requires the offline_access permission when the app is authorized.

Check here: http://developers.facebook.com/docs/authentication/ for the oauth mechanism and here: http://developers.facebook.com/docs/authentication/permissions/ for the permissions list.

The REST API is deprecated and it is strongly suggested that you don’t use it anymore. Furthermore, from this October you will be allowed to use only the Oauth2 authentication (see When is Facebook turning off their session based auth?)