miled / wordpress-social-login

WordPress Social Login
http://miled.github.io/wordpress-social-login/
MIT License
399 stars 235 forks source link

Facebook App Review failed #297

Closed dawidadach closed 3 years ago

dawidadach commented 5 years ago

Dear, I have just received that Facebook has proactively reviewed my app which is used to work with Social Login plugin and it has failed to pass following checks:

The review team wasn't able to: Confirm your app works and follows Facebook guidelines Load and easily use your test app Verify Facebook Login button is visible in your screencast and adheres to Facebook brand guidelines Reproduce use case details and follow step-by-step instructions Use of user_gender follows established Facebook guidelines Use of user_friends follows established Facebook guidelines Use of user_age_range follows established Facebook guidelines Use of user_link follows established Facebook guidelines

Are you planning to do something about that? Are those scopes really required?

jaredpalmer commented 5 years ago

I have the same issue. Can we make scopes editable?

zemas-inc commented 5 years ago

Scopes is editable you can change it trough theme's function.php hook: in e.x. function wsl_lower_default_permissons( $provider_scope, $provider ){ if( 'facebook' == strtolower( $provider ) ){ $provider_scope = 'email'; // should not be empty or it will be overwritten } return $provider_scope; } add_filter( 'wsl_hook_alter_provider_scope', 'wsl_lower_default_permissons', 10, 2 ); source: http://miled.github.io/wordpress-social-login/developer-api-snippets.html

so it also do not require app review: Which permissions require review? Review is not required to ask for the two basic permissions: public_profile and email. Review is required to ask for any other permissions when people log into your app source: https://developers.facebook.com/docs/facebook-login/review/what-is-login-review/

fjakop commented 3 years ago

WSL asks by default for "user_friends", which requires review. It would be nice if this scope is only requested when contacts is enabled in wsl.