facebook - Facebook 图形 API 的异常行为 ("type": "GraphMethodException", "code": 100)

Question

我在通过图形 API 为某些用户获取一些数据时遇到了一些异常错误。例如，众所周知，我们可以通过 graph.facebook.com/username 获取基本用户信息它有效。但它不适用于某些用户。就像用户 www.facebook.com/sanzida.tanzum 是一个有效的 facebook 用户。因此，我们应该通过 graph.facebook.com/sanzida.tanzum 获取她的基本信息。但是当你尝试这样做时，你会得到错误

 {
   "error": {
      "message": "Unsupported get request.",
      "type": "GraphMethodException",
      "code": 100
   }
}

这不是权限问题，因为当她尝试通过图形 API 检索自己的数据时，使用用户自己会遇到同样的错误。实际上，用户 sanzida.tanzum 对于图形 API 是不可见的。例如，用户 sanzida.tanzum 在我的好友列表中。你可以在这里查看。 my friendlist .(它是公开的)。但是当我通过图形 API 检索我的好友列表时，我的好友列表显示不包括用户 sanzida.tanzum !但是她在我的好友列表中!我曾尝试就此事联系 facebook，因为我没有找到与此事相关的任何文件。他们回答说这是正常的。 (可能他们根本没有读我的邮件。我包括与 facebook 的电子邮件对话)

Hi তৌফিক,

They are getting errors because they are not you... they dont have permissions to see the same things you do. They might also be missing an access token. Either way: no bug here.

Thanks,

Emrakul Security Facebook

-----Original Message----- From: *****@ovi.com To: Subject: Report a Security Vulnerability - Unusual bug in facebook graph API

Your Email Address: *****@ovi.com Do you have technical details of a security vulnerability?: Yes Vulnerability Type: Privacy / Authentication Vulnerability Scope: Platform Developer API Title: Unusual bug in facebook graph API Product / URL: https://graph.facebook.com/sanzida.tanzum Description and Impact: I was doing some graph API calls for testing purpose. Mostly I was doing mostly user profile calls. (https://graph.facebook.com/exampleuser)

Somehow I realized facebook is giving following errors for some users even they are on my friendlist. Same thing occurs when they try by themselves.

As for eample the user "https://www.facebook.com/sanzida.tanzum" is on my friendlist. (My friendlist is public.You can check if you want.) So, according to facebook graph API, I can request the user's basic info using (https://graph.facebook.com/sanzida.tanzum) But it returns this error:

"{ "error": { "message": "Unsupported get request.", "type": "GraphMethodException", "code": 100 } }"

Actually graph API can't access nothing of this user. Another example.. When I request my friendlist via graph API , All friends of my friendlist is shown except the user (sanzida.tanzum). But she is in my friendlist! check here (my friendlist is public) "https://www.facebook.com/toufiqueimam/friends". So why is this happening only for few users?

Just now I got confirmation that the user herself gets the same error if she tries to access (https://graph.facebook.com/sanzida.tanzum)

{ "error": { "message": "Unsupported get request.", "type": "GraphMethodException", "code": 100 } }

Reproduction Instructions / Proof of Concept: Reproduction: first go to https://www.facebook.com/sanzida.tanzum You will see it is a valid profile. Now try https://graph.facebook.com/sanzida.tanzum You will get following error

{ "error": { "message": "Unsupported get request.", "type": "GraphMethodException", "code": 100 } }

Answer 1

这不是错误，该错误意味着您无法访问您尝试访问的数据、不存在、已被删除、不可用，因为您没有提供访问 token 可以看到它的用户等

有关 Facebook 页面的此错误消息的示例，请参阅此答案:https://stackoverflow.com/a/6847088/21062 - 如果用户阻止了您、阻止了您的应用程序、禁用了他们的帐户或禁用了所有应用程序访问他们的信息，则在尝试访问用户个人资料时也是如此。