I read here that I can get a non-expiring access token for users when calling this:
https://graph.facebook.com/oauth/access_token?
client_id=APP_ID&
client_secret=APP_SECRET&
grant_type=fb_exchange_token&
fb_exchange_token=EXISTING_ACCESS_TOKEN
It is obvious what client_id
and client_secret
are but what the heck are grant_type
and fb_exchange_token
?
I managed to post something to the user's timeline/pin board but as access_token
I used APP_ID + | + APP_SECRET
. It worked great.
BTW: I need the permission manage_pages
because I want to add photos to a user album.
Any ideas what these two attributes are and where I can get them?