-1

I try to be as specific as possible to describe what I'm doing and what my problem is: In short I "hijack" some access token and use it to download XML data. Here is the long version:

First I generate a access token with the help of some app. The app is NOT mine, I think one could use ANY app: https://graph.facebook.com/oauth/authorize?client_id=xxxxxxxx&redirect_uri=http://apps.facebook.com/xxxxxxx/&scope=offline_access,email,read_insights,read_stream,user_about_me,user_activities,user_birthday,user_education_history,user_events,user_groups,user_hometown,user_interests,user_likes,user_location,user_notes,user_online_presence,user_photo_video_tags,user_photos,user_relationships,user_religion_politics,user_status,user_videos,user_website,user_work_history,user_checkins,read_friendlists,read_requests,friends_about_me,friends_activities,friends_birthday,friends_education_history,friends_events,friends_groups,friends_hometown,friends_interests,friends_likes,friends_location,friends_notes,friends_online_presence,friends_photo_video_tags,friends_photos,friends_relationships,friends_religion_politics,friends_status,friends_videos,friends_website,friends_work_history,friends_checkins&type=user_agent

In response I get the access token in the URL: access_token=AAAAA.....

Then I use this access_token to access certain informations:

https://api.facebook.com/method/fql.query?access_token=AAAAA....&query=SELECT%20uid,%20first_name,%20last_name,%20online_presence%20FROM%20user%20WHERE%20uid=[friend-uid]

So far this works very good and I don't have to renew the access token but with the new changes I only get a token that is 2 hours valid. That is too short for me because I use the token in a WGET script. I can't exchange the token because I have no further information on the app. Is there any way to overcome my problem? I don't want to make my own app only to get some information. I don't want to give FB my cc. The way it is now is fine with me.

Thanks for your help.

Katharina Weber
  • 1

1 Answers1

0

You wrote that the app is not yours, you can use a phone number and sms validation to sign up as facebook developer, if you prefer that instead of your cc.

complex857
  • 20,425
  • 6
  • 51
  • 54
  • Thanks for your answer. I figured that out already with the help of the documentation but as I wrote I don't have the APP_SECRET because it is not MY app! Do I really have to create my own app? – Katharina Weber Jul 20 '12 at 07:16
  • I think there's no way to get access tokens without applications, i guess you could try to automate a browser to login into facebook and navigate around until it gets a token, but that would be extremely brittle. – complex857 Jul 20 '12 at 07:22
  • Frankly, I won't give FB my mobile number and certainly not my CC details! – Katharina Weber Jul 20 '12 at 12:17