JFBConnect on new install not working

I installed the JFBConnect on a Joomla 3.8.10 site with no other social related extensions, just Joomla login.

I followed the documentation as written, creating my Facebook App, and using Autotune, error check, etc. The source domain and destination has been verified and facebook page are both in my business manager account. I have been able to connect a joomla user to a facebook account, and have assigned that user to the channel.

However, when trying to create the channel, I get "Selected user has not granted the manage_pages permission. Please have them login the front end of the site and accept the correct permissions." When I return to the front end of the site the Facebook logon box is gone.

I tried to create a test application clone version of my facebook application, and in trying to use that, I get the same error along with the error " Facebook – Invalid appsecret_proof provided in the API argument. Even though autotune works on the testapplication.

What am I missing? Also, can you provide any guidance on what should be included in the video / configuration use steps that need to be submitted for Facebook app approval?

dlewintx

Made some progress with several hours of trial and error. There seems to be something missing in your instructions. Here is what I experienced and what I had to do to get it to work.

I followed the instructions as written in creating the Facebook App, and then using AutoTune. I was able to log into the front end of my website using Facebook, and then associate that account with a local Joomla admin account.

When I went to set up the channel, and selected the above linked user, I got an error message, "Selected user has not granted the manage_pages permission. Please have them login the front end of the site and accept the correct permissions". When I then logged back into the front end again using the linked Facebook account, I got the warning message
"Invalid Scopes: manage_pages, publish_pages. This message is only shown to developers. Users of your app will ignore these permissions if present. Please read the documentation for valid permissions at: developers.facebook.com/docs/facebook-login/permissions". When I tried to close the message, it just kept cycling.

I was finally able to log into the from end and grant the required permissions after TURNING OFF PUBLIC ACCESS to the Facebook application. When I did this, I was able to set permissions in Facebook through the front end, and then complete the Channel set-up by selecting the desired page in the channel set-up dialog box. I was also able to successfully post from the website to the Facebook page with the Facebook application still "NOT PUBLIC".

This raised a couple of questions. In the set-up documentation (which is generally quite good) it specifically states to TURN ON PUBLIC ACCESS. I did not see anywhere where there was a step to turn it back off. But I could NOT get the component channel set up without doing this. Am I missing something somewhere? Should this not have worked with the application not public? Does the application ever need to be public if only being used by me for the websites and pages I manage? And if it works if not public, and never needs to be public, is application review still required?

At what point do we need to submit for application review, and what do you recommend we show in the accompanying screen cast recommended to be included in our approval submission?

dlewintx

Alex:

Thanks for the reply. Got it and understand the pain Facebook is putting everyone through. I posted my comments not to complain but to save someone else some time. It works as you explained, in that after approval, I can go live. The interesting thing I found in this process, is that even when in DEV mode, the application was allowed to post content to my Facebook page that was viewable by all. This was different from creating a test app clone, where the content is only viewable by admins. So I am wonder is an app is never set to public, and is only used by the creator, with dev mode working, will that bypass the app review process. I know you don't know and it will be interesting to see how this all shakes out.

Nice product by the way. Somewhat of a steep learning curve for me, but that is not your issue.

dlewintx

Alex:

You stated that "Our understanding and belief is that yes, this is true. If you don't want normally users to login to your app, leaving it in Dev mode to do what you want is acceptable."

From a website creator and manager perspective this is HUGE, and if it holds true after Facebook stabilizes, this might be something to highlight in the instructions as it could save some from the headaches of the review process.

The use case in my situation is I create and host Joomla websites for clients. If they want Facebook integration so that new website content is auto posted to their facebook page, I requires admin access to their Facebook Page. All of this is set-up in through a Facebook Business Manager account. The end result is I have verified ownership of the websites, own the app, and have admin rights to the destination page. The facebook app is then only used by me, and ONLY for those websites and pages I manage. It is never intended to be used for, or by, public access or any other users. Given the way your channel access works in that once established for the someone with page admin rights, all authorized website users can use it to autopost content, I never need my app to be public.

Under this usage scenario, and the way it appears to work, I should not have any need to submit an app for review, and can avoid that headache. I guess we will see how this plays out.

dlewintx