Graph API v2.8 reaches end of life on April 18, 2019

[jbrowning]

Just an FYI that the v2.8 API endpoint will be EOL soon so the default token_url config will need to be updated.

More details here: https://developers.facebook.com/docs/graph-api/changelog

[Ianleeclark]

I went looking through this one some more, and this library could realistically hit 3.2 (giving an EOL of April 30 2021). There is one major deviation from the norm, and it's that access tokens will now expire after 90 days of not engaging with the app (see: https://developers.facebook.com/blog/post/2018/05/01/facebook-login-updates-further-protect-privacy/).

Bumping to 3.3 has (what I believe to be a potentially breaking) change:

Unencrypted User and Page access tokens, which were deprecated in 2012, will no longer be accepted by any of our APIs.

I'm really not too familiar with their graph API, but I believe this would require updating the README to notify users to use encrypted credentials (or doing the workflow for them), and, realistically, releasing a breaking change/major version bump.

@ueberauth/developers If y'all have any idea guidance on how I could test this, I'd be happy to make the changes, but I just wanted to drop-off my findings either way.

[doomspork]

This is pretty serious but I'm rather out-of-touch with Facebook's GraphAPI at this point. I'm open to a PR @Ianleeclark that would address this, how best to test it I'm not entirely sure 🤔

cc @ueberauth/developers