2 ms·
Hi, this is actually incorrect. Facebook uses internal IDs (these are the ones used here, they are valid globally) AND external IDs for Apps and their connected
by pkreissel 7y ago
Hi, this is actually incorrect. Facebook uses internal IDs (these are the ones used here, they are valid globally) AND external IDs for Apps and their connected pages. The external IDs have a completely different format and cannot be used to access a profile in the web browser (which is what we were able to do for all of them).
We cannot completely rule out, that Facebook assigns two IDs to the same profile. However we think this is highly unlikely. We tried to check for that as far as possible. For example: If I search for a profiles name, that I found via a random ID lookup, and then check that profiles ID, its the same ID that was used in the lookup. We couldn't try this at scale though.
- rnd_dude428673 7y agoIt's pretty simple to validate. Create two different FB developer accounts. Then create a Login with FB type app for each account. Then use a third FB account to login to each different app and use the FB Graph api to view the user id in the tokens. It will be different.