auth: Update facebook scope

The read_stream scope was replaced with user_posts; this change
was made to demos/facebook/facebook.py in #1674 but the corresponding
comment was not updated. The offline_access scope has also been removed
but seems irrelvant to this comment.

Fixes #1566

diff --git a/tornado/auth.py b/tornado/auth.py
index 7f05a531f10dca40cce45334d1d7a2f560ea44e4..1312f29909cc399a2adfe65fd9d2b1ac01faf118 100644 (file)
--- a/tornado/auth.py
+++ b/tornado/auth.py
@@ -1008,7 +1008,7 @@ class FacebookGraphMixin(OAuth2Mixin):
                       self.authorize_redirect(
                           redirect_uri='/auth/facebookgraph/',
                           client_id=self.settings["facebook_api_key"],
-                          extra_params={"scope": "read_stream,offline_access"})
+                          extra_params={"scope": "user_posts"})
 
         .. testoutput::
            :hide: