Can't get email claim from Facebook

[VeronicaWasson]

Using beta7 packages. In my startup:

        services.Configure<FacebookAuthenticationOptions>(options =>
        {
            options.AppId = Configuration["Authentication:Facebook:AppId"];
            options.AppSecret = Configuration["Authentication:Facebook:AppSecret"];
            options.Scope.Add("email");
        });

However, inside AccountController.ExternalLoginCallback, I get back these claim types in the ExternalPrincipal:

• "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier"
• "urn:facebook:name"
• "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name"

In the Fiddler traffic, I can see that it’s calling the FB Graph API and getting:

{"name":"xxx","id":"xxxx"}

If I modify the request to ask for email and replay it, then I do get the email, so I think my scope is correct

GET https://graph.facebook.com/v2.2/me?fields=id,name,email&access_token=blah

Response:

{"id":"xxx","name":"xxxx","email":"xxx"}

[Tratcher]

Related?
#365
#366

[VeronicaWasson]

I don't think so? It's sending a well-formed request to FB:

https://graph.facebook.com/v2.2/me?access_token=blah&appsecret_proof=blah

But I don't see the middleware asking for email anywhere, and FB is just returning id and name. I'm not familiar enough with FB graph API to know if FB should be returning email by default, or if the middleware needs to ask for it specifically.

EDIT: I wonder if it's related to this SO question

[Eilon]

Need to try to repro this. It might be due to the user marking their email address as hidden data, so even if you request it, it won't be available.

[AlexTo]

Yes I have the same issue, can't get email from Facebook if I just add

services.Configure<FacebookAuthenticationOptions>(options =>
        {
            options.AppId = Configuration["Authentication:Facebook:AppId"];
            options.AppSecret = Configuration["Authentication:Facebook:AppSecret"];
            options.Scope.Add("email");
        });

I could see that Facebook asks me for permission to provide email to the webapp but I just don't have the claim in info.ExternalPrincipal