{"id":32,"date":"2020-06-22T18:28:09","date_gmt":"2020-06-22T18:28:09","guid":{"rendered":"http:\/\/akildy.com\/themes\/sommet\/?p=32"},"modified":"2023-02-03T10:14:36","modified_gmt":"2023-02-03T10:14:36","slug":"using-node-js-to-interact-with-facebooks-graph-api","status":"publish","type":"post","link":"https:\/\/lorenstewart.me\/using-node-js-to-interact-with-facebooks-graph-api\/","title":{"rendered":"Using Node.js to Interact with Facebook&#8217;s Graph API"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"32\" class=\"elementor elementor-32\">\n\t\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-4f5cb7e5 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"4f5cb7e5\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-40946750\" data-id=\"40946750\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6645d1fb elementor-widget elementor-widget-text-editor\" data-id=\"6645d1fb\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.10.2 - 29-01-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<!-- wp:paragraph -->\n<p>Facebook has a JavaScript SDK for interacting with their Graph API, but it&#8217;s for client-side JavaScript \u2013 there is no Node.js SDK.Although there are several NPM packages for working with Facebook&#8217;s Graph API, no NPM package seems to be as mature as packages for other social media platforms like Twit for the Twitter API. The best of the few seems to be facebook-node-sdk, but I hesitate to rely on it for a business critical app.The Graph API docs have no examples using vanilla JavaScript (although there are a few examples using their client-side SDK)<\/p>\n<!-- \/wp:paragraph --><!-- wp:quote -->\n<blockquote class=\"wp-block-quote\">\n<p>This blog post is filled with useful examples using Node\/Express!<br \/>Contents:<br \/>-Authorization &amp; Access Tokens<br \/>-Querying the Search Route<br \/>-Querying a Single Graph Object<br \/>-Querying for the Pages a User Manages<br \/>-Posting Content.<\/p>\n<\/blockquote>\n<!-- \/wp:quote --><!-- wp:paragraph -->\n<p><span style=\"color: #000000;\"><strong>1. Authorization &amp; Access Tokens<\/strong><\/span><br \/>To get started, you need an access token obtained through Facebook authentication. If you have an access token at your disposal, you can skip the rest of this section. If you need to get one, read on<\/p>\n<p>Generally, an app acquires a user access token through an authentication procedure. Passport.js is a great authentication package for Node.js apps.The Passport.js Facebook authentication strategy comes with a very useful demo app that uses Express.js. If you need to acquaint yourself with Passport, this repo is a great place to start.<\/p>\n<p><strong>Getting a token<\/strong><br \/>Unfortunately, it isn&#8217;t as easy as merely firing up the example linked to above and authenticating. You must to have an app registered with Facebook. Instructions for doing so can be found here.<\/p>\n<p>Once you have a registered app, you&#8217;ll need to use the app_id and app_secret in the config file of your authentication app. Adjust the code in the demo app so you console.log() the returned access token, as you&#8217;ll need the token for the requests outlined below.<\/p>\n<p><strong>Getting POST permissions<\/strong><br \/>No all access tokens are created equal. If you intend to post to a user&#8217;s feed or to a page managed by a user, you need to specifically ask for &#8216;publish_actions&#8217; and &#8216;manage_pages&#8217; permissions through a scope object in your authentication.<\/p>\n<p>When you ask for these permissions, a user logging in will see a prompt stating your app is requesting these permissions. If the user clicks the okay button, an access token with the specified permissions is generated<\/p>\n<p><strong>Facebook&#8217;s App Review Process<\/strong><br \/>Without submitting your app to an official FB review process, the above code will only give you &#8216;public_profile&#8217; access. To request additional permissions you have to prove that you&#8217;re a well-intentioned developer with a well-intentioned app.For the right to obtain access tokens with additional permissions, you&#8217;ll have to fill out the &#8216;App Review&#8217; section of your app&#8217;s settings page in the Facebook Developers website.<\/p>\n<p>The review process is quite an endeavor, and requires you to describe your app and submit a video walk-through of how your app is used.<\/p>\n<p><span style=\"color: #000000;\"><strong>2. Graph API Search<\/strong><\/span><br \/>If have an access token, you&#8217;re ready to get startedAlthough the Node\/Express route is a POST route, the request we are sending to the Graph API is a GET.For the app we are building, the value assigned to searchType could be &#8216;page&#8217; or &#8216;user&#8217;, and each type will return different properties. In reality, the search Type could be any of the objects listed above.<\/p>\n<p>Notice the the fields property and the userFieldSet and pageFieldSet constants. When searching pages, the code above requests the &#8216;name, category, link, picture, is_verified&#8217; fields to be returned. These are all part of the page public profile and do not require special permissions.The fields requested when searching users are part of the user public profile. Although these fields are all publicly available, this data will not be returned unless specified in the fields property of the request.<\/p>\n<p>The Graph API&#8217;s search end point only returns publicly available information (I think), and there&#8217;s a good chance that you&#8217;ll want more than this; you&#8217;ll probably want the additional information your user access token permits you.<\/p>\n<p><span style=\"color: #000000;\"><strong>3. Querying a Single Graph Object<\/strong><\/span><br \/>This section covers what you&#8217;ll need to do to get information about a single object. The section starts with querying a single user, and ends with querying a single photo.<\/p>\n<p>When querying the search route (see above), an id is returned regardless of the object type and fields specified. You need this id to make a single object request(e.g. &#8216;page&#8217;, &#8216;user&#8217;, &#8216;event&#8217;, &#8216;photo&#8217;, &#8216;post&#8217;, etc.).<\/p>\n<p>Below is an example of querying a single user by id.<\/p>\n<p>Permissions: If you have a Graph object&#8217;s id, you can request detailed data as long as the access token you&#8217;re using has permissions for the fields you are requesting.<\/p>\n<p>Although a lot of information is returned, much important information is left out. For example, no urls are provided for the photos in my photo library. To get a photo&#8217;s url, you have to ask for the link field of the photo. photos is a field of a User node; link is field of photo. To get the link of each photo in our response, we need to request a field (link) of a field (photo).<\/p>\n<p>The syntax for requesting the field of a field is field{nestedField}. To request more than one nested field, separate them by commas like so: field{nestedField1, nestedField2, nestedField3}. While we&#8217;re on the topic of cool syntax to work with the Graph API, there&#8217;s also a way to limit the number of items returned<\/p>\n<p><span style=\"color: #000000;\"><strong>4. Querying for the Pages a User Manages<\/strong><\/span><br \/>This request is probably not one you need to use very frequently, but if your app needs to manage the pages for which the user has admin permissions, this example will be useful.<\/p>\n<p>In the example below, notice the fields property is not included because the data you&#8217;re requesting is implicit in the url.The user query in section #3 above also returned this information because the user access token that is used has permissions for this information, and &#8216;accounts&#8217; is specified in the fields property of the request.<\/p>\n<p>If you have accounts permissions, and only want a list of accounts the user manages (rather than all user data), then this is the query you want to perform.<\/p>\n<p>\u00a0<\/p>\n<!-- \/wp:paragraph -->\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Facebook has a JavaScript SDK for interacting with their Graph API, but it&#8217;s for client-side&#8230;<\/p>\n","protected":false},"author":1,"featured_media":24,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/lorenstewart.me\/wp-json\/wp\/v2\/posts\/32"}],"collection":[{"href":"https:\/\/lorenstewart.me\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lorenstewart.me\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lorenstewart.me\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lorenstewart.me\/wp-json\/wp\/v2\/comments?post=32"}],"version-history":[{"count":10,"href":"https:\/\/lorenstewart.me\/wp-json\/wp\/v2\/posts\/32\/revisions"}],"predecessor-version":[{"id":2107,"href":"https:\/\/lorenstewart.me\/wp-json\/wp\/v2\/posts\/32\/revisions\/2107"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/lorenstewart.me\/wp-json\/wp\/v2\/media\/24"}],"wp:attachment":[{"href":"https:\/\/lorenstewart.me\/wp-json\/wp\/v2\/media?parent=32"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lorenstewart.me\/wp-json\/wp\/v2\/categories?post=32"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lorenstewart.me\/wp-json\/wp\/v2\/tags?post=32"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}