How do sites like StackOverflow and Untappd "force" a user to accept their permissions?
When I've been trying with the JavaScript SDK I've been using the scope object to request email addresses, but I keep seeing "Edit the info you provide", allowing the user to not provide their email address. I've even tried following Manually Building a Login Flow, with the same results.
Image:
As we're giving the user the option to register on the site through Facebook, we're reliant on the email address to create an account within our database.
Yet sites like StackOverflow and Untappd offer no such option, I'm forced to accept those permissions.
So what's the secret? How do I achieve this? Is it a setting I'm overlooking somewhere? Or does it need to be "approved"?
They are using an old App created before end of April 2014, it was different back then. You can´t force it anymore, you can only check if the user authorized the permissions after login, with the return_scopes
flag, for example:
https://developers.facebook.com/docs/reference/javascript/FB.login/v2.2