title: Accessing a user's friends via the Facebook Graph API?
body: <p>Has anybody successfully accessed the list of a user's friends via the Facebook Graph API?</p>
  
  <p>I have written code to authenticate users on my website via Facebook's OAuth API. It works splendidly; I can access public information, likes, interests, activities, etc. I access these data points via the following URL format, where I substitute "uid" with a valid id (I use the uid in place of "me" because "me" doesn't work as advertised):</p>
  
  <p><a href="https://graph.facebook.com/uid?access_token=" rel="noreferrer">https://graph.facebook.com/uid?access_token=</a>...<br/>
  <a href="https://graph.facebook.com/uid/likes?access_token=" rel="noreferrer">https://graph.facebook.com/uid/likes?access_token=</a>...<br/>
  <a href="https://graph.facebook.com/uid/interests?access_token=" rel="noreferrer">https://graph.facebook.com/uid/interests?access_token=</a>...<br />
  <a href="https://graph.facebook.com/uid/activities?access_token=" rel="noreferrer">https://graph.facebook.com/uid/activities?access_token=</a>...</p>
  
  <p>However, accessing friends simply does not work. The url,</p>
  
  <p><a href="https://graph.facebook.com/uid/friends?access_token=" rel="noreferrer">https://graph.facebook.com/uid/friends?access_token=</a>...</p>
  
  <p>returns the following error:</p>
  
  <pre><code>{
     "error": {
        "type": "OAuthAccessTokenException",
        "message": "An access token is required to request this resource."
     }
  }
  </code></pre>
  
  <p>The examples on the <a href="http://developers.facebook.com/docs/api" rel="noreferrer">Graph API docs</a> all work, yet the access token generated on that page has a different format than mine. I'm not sure why. I've followed their instructions to a tee (and have it working for everything else!).</p>
  
  <p>Friends are considered <a href="http://developers.facebook.com/docs/authentication/permissions" rel="noreferrer">publicly accessible information</a>, and I've double-checked my Facebook account permissions, so I don't think that's the problem.</p>