Facebook

Members sign in with their Facebook account, in the system browser.

Before you start

Console	Meta for Developers
Endpoint group	Social Login
Email	Returned, and treated as verified — Facebook can match an existing account
Signs in	In the browser

Create the app

1. Open Meta for Developers and create an app.

   Choose Authenticate and request data from users with Facebook Login when asked what you are building.

2. Add the Facebook Login product to the app.

3. Open Facebook Login → Settings.

4. Add the redirect address under Valid OAuth Redirect URIs: the string from Memberside → API Keys → Social Login → Facebook, which looks like https://yoursite.com/wp-json/memberside/v1/social/callback/facebook.

5. Leave “Login with the JavaScript SDK” off. The sign-in happens server-side.

6. Open App settings → Basic and copy the App ID and App secret.

7. Fill in the Privacy Policy URL. Meta will not let the app go live without one, and the App Store asks for the same URL.

Take the app live

A development-mode app works only for your own team

A new Meta app is in Development mode. Sign-in succeeds for accounts with a role on the app and fails for everyone else, which reads as “it works for me and not for members”.

Switch the app to Live at the top of the dashboard. The email permission is granted without review; anything beyond it needs Meta’s app review, and social sign-in needs nothing beyond it.

What to paste into Memberside

Under Memberside → API Keys → Social Login → Facebook:

Field	Value
Client ID	The App ID
Client secret	The App secret

The verified-email caveat

Facebook requires a confirmed address on the account, and Memberside treats the address it returns as verified on that basis. It is an inference from Facebook’s own account rules rather than a claim Facebook makes in the response. If your community’s security posture makes that inference unacceptable, do not offer Facebook as a way of matching existing accounts.

When it does not work

Symptom	Cause	Fix
Works for you, fails for members	The app is in Development mode	Switch it to Live
“URL Blocked”	The address is not in Valid OAuth Redirect URIs	Add it exactly
No email comes back	The member denied the email permission	They can re-authorise and allow it
“App Not Setup”	Facebook Login was never added as a product	Add it
Cannot switch to Live	The Privacy Policy URL is empty	Fill it in under Basic settings