Finally found: best way to discover granted Facebook app permissions
artchang.com
artchang.com
Once again, thank you. We look forward to doing the same and giving our users control of their privacy and their data.
What if, for example, this is a pure client side application that doesn't store anything in a backend database? Everytime a user comes to your site, you can check to see if local storage has anything sure, but if they're on a new computer or have cleared their storage, you're in the dark.
Another edge case: say you have millions of users, only 1000 regularly visit the site. You would have webhooks for a million users updating your backend, rather than just confirming permissions with facebook whenever they arrive to your site. The hop to facebook is probably just as fast, if not faster, than checking in with your own backend. Let Facebook take the brute of the traffic ;)
I think asking for the bare minimum as you need it is absolutely the way to go as tons of people bounce out of apps that need all kinds of permissions before they get to even see the app. I get sick of seeing apps that want offline publish access before I even know what the app is because the developers are lazy and just request all permissions available.
In the meantime, I can give you a quick description of what we have going on: each link that requires an extra permission not asked up front has a listener that will check what permissions are available. If it's missing a permission, we actually trigger a Facebox (from @defunkt's facebook lib). The Facebox defaults are really clean. Light overlay, slight shadow, nothing fancy. We put in different messages for different actions, one for example: "Yes you can like someone's post from FeedTopic! We need a new permission from Facebook to do this for you. Click the 'Add Permission' button to bring up Facebook's Permissions page". We have a button that looks SUPER clickable, like if you didn't click it you'd feel horrible because it has nice css gradients and looks like it's 3D. Underneath we have a message that says: "We won't publish anything without your direct permission to any part of Facebook, promise". Once you click the button, it will show you the FB permission prompt. yes, it's multiple steps, but it's clean and makes people feel really confident. BTW, liking something on feedtopic is probably the last thing people are going to the site for ;) It's just a small piece of info I can give away for now before the launch.