nolimitdev
commented
7 months ago I have also published bug here https://developers.facebook.com/community/threads/276984085174740 and also another user immediately wrote I have the same issue. Email exists, access is granted, but field is not provided.. Im wondered that this bug is not catched by Facebook itself. By our logs situation when user grants email scope but email filed is empty takes ages. Year 2015 without errors and since august 2016 many these errors including nowadays. So each user which changes email address is not able correctly login to application which requires email address.
Bug affects both Android & Web login. In case web login I can provide more details immediately...
Facebook after OAuth2 grant dialog redirects to for example https://example.com/my-redir-uri/?granted_scopes=email%2Cpublic_profile&denied_scopes&code=...&state=... as you can see there all looks good in URL - user granted access, granted_scopes contains "email" and denied_scopes is empty, but when exchanging access token for user data with request e.g. https://graph.facebook.com/v16.0/me?fields=id,email,name,first_name,last_name,gender&access_token=... email field is missing in response data!
I hope Android can be investigated by Facebook. But I can confirm users with changed email address are not able to login to our app using Android Facebook SDK because such as in web login also in android login email field is missing.
pad01g
Micpol
Checklist before submitting a bug report
Java version
1.8
Android version
Any
Android SDK version
16.0.0
Installation platform & version
Gradle
Package
Login
Goals
When use Facebook login I want get user email address because I have requested it and user granted it!
Expected results
Email address must be provided to app which requested it.
Actual results
Email address in not provided. Note that same bug is in Android Login and Web Login. Facebook has critical bug in OAuth2. When you add new email address (and verify it - it is required, can not be skipped) and remove origin email address from facebook options then Android/Web (OAuth2) login no more works because Facebook does not provide email address to app although app requires it and user grants it! Please note that this is not related to just my Facebook account but probably to any (tested at least using 3 different accounts). Also note that this is not related to just my facebook application but probably any. I have tested this bug on more facebook accounts (by adding new email and removing old) and tested with more applications. The result is always the same - bug is there. Note that problem is not that app receive different email what is of course expected when user changed it but app will receive NO email at all (email filed missing/empty/null).
Steps to reproduce
Use any Facebook account. Try to use Facebook Android/Web sign in to get email address. It will work fine until in your facebook acount add another email address (of course verify code sent to email), then remove origin/first email address from address. Now any app is not able to get email address although it is requested in scopes and user grants it! Also you can try remove app from https://www.facebook.com/settings?tab=applications&ref=settings and try sign in again - it also does no work. App will not receive email address. So to reproduce this bug it is very easy as described.
Code samples & details
No response