Facebook Login Error - "Invalid Scopes: user_link" - with standard Bubble Plugin

Facebook login was working for me. I don’t think I’ve made any changes since that would cause it to break. But I just got this error when trying to login with FB:

image

FB directs to this page for more info: Permissions Reference - Graph API - Documentation - Meta for Developers

On that FB page, the user_link is defined as follows:

When I click “Okay” on the Error popup I’m shown this page:

I don’t see any plugin settings that seem to be relevant:

I do copy the FB Profile Link when a new user signs up with FB:

However even when I remove that FB Profile Link field from the workflow in the screenshot before I still get the same error.

Any ideas as to whether this is a bug to report to Bubble or something I’m doing wrong?

1 Like

I just got the same error , I think it is a bug to be reported.

Same error.
Did anyone manage to solve this?

I don’t think so. I just submitted this as a bug.

Thanks for the update.
Fingers crossed.

PS: do you have a link to the bug you submitted? (my app is completely blocked at the moment)

You don’t get a link, just a confirm email

I got the same problem.

But also found out that only the owner or developer gets this message. All other users are fine.

same issue just happened :frowning:

I am facing the same error but it is " only a message for app developer only " not users , https://stackoverflow.com/questions/49816414/invalid-scope-user-about-me-this-message-is-only-shown-to-developers-users-of , anyone kindly tell us how to disable a scope in the FB App ? in the Facebook plugin page we have 2 mandatory options ! any support really appreciate

I guess the scope can only be determined by the bubble fb plugin(the API call). I just sent an email to support@bubble.io to raise their awareness.

1 Like

does anyone know how to build your own social login using API connector?

I have sent an email as well.
No resolution or workaround yet though…

I’ve had some back and forth with Bubble support and done some investigating in my FB Developer settings. I now think I know what’s going on…

You need permission to access FB data. Some permissions are granted by default and some require a special request. The data fields highlighted in green below are granted by default. Profile link (aka user_link) used to be granted by default but as of a week or so ago now requires a special request.

image

There are a lot of permissions that require special request. When you request these permissions you undergo App Review.

If you want to see these permissions, learn about the app review process, or request permissions click this link: Meta App Review - Documentation - Meta for Developers

Here’s a screenshot from the video on the page linked above. It show that user_link requires a request / App Review:

Bubble doesn’t want to remove the user_link feature because some Bubble apps have come to rely on it.

I have suggested that they add a section to the app plugin settings where users can enable these extra permissions (e.g. user_link, user_location, user_photos, etc) as shown in the screenshot below.

This would allow:

  • Bubblers who haven’t requested and been approved for the user_link feature to test the FB login feature and see what their users see instead of getting an error message
  • Bubblers who have requested and been approved for the user_link feature to enable it by simply checking a checkbox
  • The growth of the FB Plugin feature set to include additional permissions for which individual Bubblers may be approved (e.g. user_location, user_photos etc)

Bubble need to discuss the UX and engineering decisions internally before committing to anything.

In the interim it seems, we can:

  • live with this error and as developers not be able to login via FB as our users can
  • have or invent some reason for needing the user_link permission and go through the FB App Review process justifying our need for that permission. If approved, the error message will go away.
2 Likes

makes sense, thanks!, I’ll request for the permission

Your suggestion makes perfect sense.

Thanks for coming up with a great solution.

The Bubble team has implemented a solution: within the plugin settings you can now specify whether you want the User URL included (if you don’t have the permission, switch this off):

However, I’m now getting a new error:

Thanks for alerting me to the plugin update. I just tested it and it worked for me. Was it working for you prior to the user_link error?

Good to hear!
Yes - it was all working fine…

Now there seems to be an issue with the way the scope parameter is passed:
https://www.facebook.com/dialog/oauth?client_id=…&scope=emailuser_link

When I manually change “&scope=emailuser_link” to “&scope=email”, it works.