 <blockquote> <p>The app seems to be correctly allowing users to log into the app and all, but it never posts anything to their feed despite having publish_stream set as a permission.</p> </blockquote> <p>Your app has to <em>actively</em> make a post … see <a href="https://developers.facebook.com/docs/reference/api/user/#feed" rel="nofollow">https://developers.facebook.com/docs/reference/api/user/#feed</a></p> <blockquote> <p>And then when I click "Go to App," it goes without requesting any kind of permission.</p> </blockquote> <p>Once again, you have to actively do that if you want it to happen. Or you could try <a href="https://developers.facebook.com/docs/opengraph/authentication/#referrals" rel="nofollow">authenticated referrals</a>, which will prompt the user to give permissions before entering your app in certain scenarios.</p>