facebook grap API的异常行为（“类型”：“GraphMethodException”，“代码”：100） [英] Unusual behavior of facebook grap API ("type": "GraphMethodException", "code": 100)

问题描述

通过图形API为某些用户提取某些数据时，我遇到了一些不寻常的错误。
例如，所有人都知道我们可以通过获取基本的用户信息graph.facebook.com/username
它可以工作。但是对于某些用户来说，它不起作用。像用户 www.facebook.com/sanzida.tanzum 是一个有效的Facebook用户。所以，我们应该通过 graph.facebook.com/sanzida.tanzum 获得她的基本信息。但是当您尝试这样做时，您将收到错误

I am having some unusual errors while fetching some data for some users via graph API. As for example w all know we can get basic user info via graph.facebook.com/username And it works. But it is not working for some users. Like the user www.facebook.com/sanzida.tanzum is a valid facebook user. So, we should get her basic info via graph.facebook.com/sanzida.tanzum. But when you will try that, you will get the error

 {
   "error": {
      "message": "Unsupported get request.",
      "type": "GraphMethodException",
      "code": 100
   }
}

这不是一个权限问题，因为当她尝试通过图形API检索自己的数据时，使用用户自己也会收到相同的错误。实际上，用户sanzida.tanzum是不可见的图形API。例如，用户sanzida.tanzum在我的朋友列表中。你可以在这里查看我的朋友列表（它是公开的）。但是当我通过图形API回溯我的朋友列表时，我的朋友列表显示不包括用户sanzida.tanzum！但她在我的朋友列表！
我已经尝试联系Facebook的这个事情，因为我没有找到与此有关的文件。他们回答说是平常的。 （可能他们根本看不到我的邮件），我正在和Facebook的电子邮件对话）

And it is not a permission issue because use user herself gets the same error when she try to retrive her own data via graph API. Actually the user sanzida.tanzum is invisible to graph API. For example user sanzida.tanzum is on my friend list. You can check here. my friendlist.(it is public). But when I retrive my friendlist via graph API, my friendlist is shown excluding the user sanzida.tanzum ! But she is in my friendlist! I have tried to contact facebook for this matter because I did not find any doccument related to this matter. They replied it is usual. (probably they did not read my mail at all. I am including the email conversation with facebook)

嗨তৌফিক，

Hi তৌফিক,

他们得到错误，因为他们不是你...他们没有
的权限看到你做的相同的事情。他们也可能缺少
访问令牌。无论哪种方式：没有错误。

They are getting errors because they are not you... they dont have permissions to see the same things you do. They might also be missing an access token. Either way: no bug here.

谢谢，

Emrakul Security Facebook

Emrakul Security Facebook

-----原始信息----- From：*****@ovi.com To：主题：报告安全漏洞 - facebook图表API中的异常错误

-----Original Message----- From: *****@ovi.com To: Subject: Report a Security Vulnerability - Unusual bug in facebook graph API

您的电子邮件地址：*****@ovi.com您有技术细节
a安全漏洞？：是漏洞类型：隐私/
身份验证漏洞范围：Platform Developer API标题：
Facebook图表API中的异常错误产品/ URL：
https ：//graph.facebook.com/sanzida.tanzum 描述和影响：I
正在做一些图API调用进行测试。大多数情况下，我正在做
，主要是用户个人资料调用。 （ https://graph.facebook.com/exampleuser ）

Your Email Address: *****@ovi.com Do you have technical details of a security vulnerability?: Yes Vulnerability Type: Privacy / Authentication Vulnerability Scope: Platform Developer API Title: Unusual bug in facebook graph API Product / URL: https://graph.facebook.com/sanzida.tanzum Description and Impact: I was doing some graph API calls for testing purpose. Mostly I was doing mostly user profile calls. (https://graph.facebook.com/exampleuser)

不知何故，我意识到Facebook正在给一些用户以下错误
，即使他们在我的朋友列表。相同的事情发生在他们尝试
本身的时候。

Somehow I realized facebook is giving following errors for some users even they are on my friendlist. Same thing occurs when they try by themselves.

对于用户 https://www.facebook.com/sanzida.tanzum 在
我的朋友列表。 （我的朋友列表是公开的。你可以检查你想要的。）
所以，根据facebook图形API，我可以使用（信息。 facebook.com/sanzida.tanzumrel =nofollow> https://graph.facebook.com/sanzida.tanzum ）但是它返回
这个错误：

As for eample the user "https://www.facebook.com/sanzida.tanzum" is on my friendlist. (My friendlist is public.You can check if you want.) So, according to facebook graph API, I can request the user's basic info using (https://graph.facebook.com/sanzida.tanzum) But it returns this error:

{error：{
message：Unsupported get request。，
type：GraphMethodException，
code：100 }}

"{ "error": { "message": "Unsupported get request.", "type": "GraphMethodException", "code": 100 } }"

实际上，图形API无法访问此用户。另一个
示例..当我通过图形API请求我的朋友列表时，除了用户（sanzida.tanzum）之外，显示
我的朋友列表的所有朋友。但她是
我的朋友列表！在这里查看（我的朋友列表是公开的）
https://www.facebook.com/toufiqueimam/ 的朋友。那么为什么这个
仅发生在少数用户？

Actually graph API can't access nothing of this user. Another example.. When I request my friendlist via graph API , All friends of my friendlist is shown except the user (sanzida.tanzum). But she is in my friendlist! check here (my friendlist is public) "https://www.facebook.com/toufiqueimam/friends". So why is this happening only for few users?

刚才我确认，用户自己得到相同的错误
如果她试图访问（ https://graph.facebook.com/sanzida.tanzum ）

Just now I got confirmation that the user herself gets the same error if she tries to access (https://graph.facebook.com/sanzida.tanzum)

{error：{
message：Unsupported get request。，
type：GraphMethodException，
code ：100}}

{ "error": { "message": "Unsupported get request.", "type": "GraphMethodException", "code": 100 } }

复制说明/概念证明：复制：首先将
转到 https://www.facebook.com/sanzida.tanzum 你会看到它是一个有效的
配置文件。现在尝试 https://graph.facebook.com/sanzida.tanzum 您将
获取以下错误

Reproduction Instructions / Proof of Concept: Reproduction: first go to https://www.facebook.com/sanzida.tanzum You will see it is a valid profile. Now try https://graph.facebook.com/sanzida.tanzum You will get following error

{错误：{
message：不支持获取请求，
type：GraphMethodException ，
code：100}}

{ "error": { "message": "Unsupported get request.", "type": "GraphMethodException", "code": 100 } }

推荐答案

错误，错误意味着您尝试访问的数据不可访问，不存在，已被删除，因为您没有提供来自可以看到它的用户的访问令牌，因此不可用。

This isn't a bug, the error means that the data you're trying to access is not accessible to you, does not exist, has been deleted, is not available because you haven't provided an access token from a user who can see it, etc.

有关Facebook页面的此错误消息的示例，请参阅此答案： https://stackoverflow.com/a/6847088/21062 - 尝试访问用户个人资料时，如果该用户已经阻止了您，阻止了您的应用，停用了他们的帐户或禁用了所有的应用，信息rmation。

See this answer for an example of this error message in relation to Facebook pages: https://stackoverflow.com/a/6847088/21062 - the same is true when trying to access user profiles if that user has blocked you, blocked your app, disabled their account or disabled all apps from accessing their information.

这篇关于facebook grap API的异常行为（“类型”：“GraphMethodException”，“代码”：100）的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！