affinityworks/main

disable FB events permissions [1]

Closed this issue · 0 comments

resolved by #604


Acceptance Criteria

GIVEN I am logging in with FB OAuth for the first time

  • THEN I should not see a scary warning about the app asking for permissions that have not been reviewed
  • AND the rest of the app should continue to function without new halting errors

Context

FB allows you to ask for email and public_profile without undergoing a review process. We currently ask for events, but have not undergone review. Thus: (1) events don't work, (2) users see a scary warning when they auth for the first time:

facebook-oauth-dialogue

Until such time as we do the review process, just disable FB events permissions.

For more on review process, see: https://developers.facebook.com/docs/facebook-login/review/

For more on permissions see: https://developers.facebook.com/docs/facebook-login/permissions

Implementation Note

Here is where we ask for events permissions:

https://github.com/affinityworks/main/blob/master/config/initializers/devise.rb#L255