They definitely did. That's a core part of the current controversy, I shouldn't have to dig up the evidence to prove this to you. The docs are on archive.org somewhere, but this TechCrunch article was more easily found, and covers the details:

https://techcrunch.com/2015/04/28/facebook-api-shut-down/

You used to be able to provide access to your friends photos, checkins, posts and more besides.