Facebook App Review required

[Jenkler]

Facebook has this requirement now. What options should i select for the SSO plugin?

"App Review required by August 1, 2018 to retain access to Facebook Platform APIs"

There are a lot to choose from!

Do I need more than this for SSO plugin?

email
Provides access to the person's primary email address. This permission is approved by default.
public_profile
Provides access to a person's name and profile picture. This permission is approved by default.
user_friends
Provides access to a person's list of friends that also use your app. This permission is approved by default.

Or do we only use

email
public_profile

[Juan G.]

@jenkler If I understand correctly, the app review is only needed to retain some special permissions, but not needed for the ones that are really useful for SSO (public profile and email).

nodebb-plugin-sso-facebook was recently updated to the new Facebook policy.

[Jenkler]

Ok, so.

Do I only need public profile and email for the updated SSO-facebook plugin?
I other words, it is safe to ignore this message from facebook?

[Juan G.]

@jenkler I think so. It's now:

scope: 'public_profile, email'

(nodebb-plugin-sso-facebook/library.js at master)

[Juan G.]

Related info:

• Facebook will limit developers’ access to account data - The Verge
• Overview - Facebook Login
• Reference - Facebook Login

[Jenkler]

Thanks for the info