Invalid OAuth access token. about django-rest-framework-social-oauth2

[christiancabizza]

Well I got to receive:
{
"refresh_token": "9hcs4X8KOnl7M6CoSYVJjZ1RWirMA2",
"access_token": "p6XsgIuRpx45TdorRdc77PTDxQwMeA",
"expires_in": 36000,
"token_type": "Bearer",
"scope": "write read"
}
but I receive it even if I comment SOCIAL_AUTH_FACEBOOK_KEY and other parameters in settings.py!!! The only truly mandatory is SOCIAL_AUTH_FACEBOOK_SECRET

Other issue: Have I to use App Token or User Token shown in https://developers.facebook.com/tools/accesstoken/ page???
It works only with User Token!

[PhilipGarnero]

You don't need SOCIAL_AUTH_FACEBOOK_TOKEN in your settings.py.
You are using a wrong token, that is why it isn't working. The token you are looking for is way longer and given by facebook when you authenticate on a client app (for example an iOS app or Js web app).
You need to use the access token shown in User Token on the https://developers.facebook.com/tools/accesstoken page.

Do you have any more questions ?

[christiancabizza]

Yes, probably because of my bad understanding of english language, sorry:

1. Definitively, WHERE do I find
   SOCIAL_AUTH_FACEBOOK_KEY = 'xxxxxxxx' #App ID
   SOCIAL_AUTH_FACEBOOK_SECRET = 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' #App Secret
   values to populate settings.py variables?

2. When and where I have to use 'Application' Model values in the registration/login process? When Facebook Dashboard values?

Thank you so much!

[PhilipGarnero]

1. You find these values on your facebook application dashboard. Normally, the app ID is shown and you have to enter a passwird to display the app secret.
2. You need to create an application model as shown in the readme and use its values when authenticating. Basically, you have to copy client_id and client secret. The token is given by facebook and you can get the test token shown under User Token on the https://developers.facebook.com/tools/accesstoken page.

[christiancabizza]

Only last few questions:

1. I'm writing an application BE, to let Android, WP and iOS devices register, login and so on through Facebook, Twitter and Google accounts.
   Does your package manage these features automatically?

2. Where can I find the list of parameters needed by HTTP services in your package?

3. Where(if they exist) can I find examples?

Thanks again!

[PhilipGarnero]

1. It does not handle all of this automatically but it helps a lot.
2. Everything is in the readme. You should be able to setup everything based solely on the readme.
3. There is the facebook example on the readme. I don't have examples of clients you'll have to do the research yourself but I believe it is fairly simple.