facebook - 如何通过已知应用范围内的用户 ID 访问 Facebook 用户页面

Question

直到今天，还有一些方法可以通过用户 ID 访问 Facebook 用户页面。我的意思是 ID，那个 facebook API 返回到我们的应用程序:https://graph.facebook.com/10152384781676191?fields=link

{
  "link": "https://www.facebook.com/app_scoped_user_id/10152384781676191/",
  "id": "10152384781676191"
}

但是这些方法都不再有效了:

• > https://www.facebook.com/app_scoped_user_id/10152384781676191 - 不起作用
• > https://facebook.com/profile.php?id=10152384781676191 - 不起作用
• > https://facebook.com/10152384781676191 - 不起作用

---

更新: 似乎发生了以下情况:according to TechCrunch, malicious sites pulled data form public user profiles.

在 TechCrunch 发表文章后，Facebook 立即屏蔽了图谱 API 返回的 URL:graph.facebook.com/v2.11/{user-id}/?fields=link&access_token={access-token}。他们“...正在努力建立额外的身份验证和速率限制...”。

---

任何 1) 快速解决方法和/或 2) 永久解决方案？

Answer 1

Facebook 有意在其 Graph API 中禁止了 link 属性。现在他们建议填写一份表格，以便单独审查每个案例。

表格:https://go.fb.com/2018-FB4D-platform-review-form.html

4 月 20 日的新闻更新:Facebook Login Changes to Address Abuse

It came to our attention yesterday that some third-party tracking scripts on websites were directly accessing Facebook public profiles. While investigating this issue, we have taken immediate action by:

• Disabling the ability to resolve the app-scoped user ID (ASID) returned by Facebook Login to a Facebook profile page, even for logged-in users.
• Instituting rate limiting of profile picture requests, to further prevent any third parties from trying to link people's activity across different websites using the application-specific identifiers issued by Facebook Login.

We don’t take breaking changes lightly, but we believe that these updates will help protect people’s privacy and increase trust across the ecosystem. If you have an urgent issue in need of resolution, please fill out this form and someone from our team will get in touch with you.

Thank you for your patience while we work to resolve this issue as soon as possible.