From 7bf6b20d1da6789d0b745e2e34514b63ef8c826c Mon Sep 17 00:00:00 2001
From: Ben Darnell <ben@bendarnell.com>
Date: Fri, 7 Jul 2023 20:04:27 -0400
Subject: [PATCH] auth: Update facebook scope

The read_stream scope was replaced with user_posts; this change
was made to demos/facebook/facebook.py in #1674 but the corresponding
comment was not updated. The offline_access scope has also been removed
but seems irrelvant to this comment.

Fixes #1566
---
 tornado/auth.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tornado/auth.py b/tornado/auth.py
index 7f05a531f..1312f2990 100644
--- a/tornado/auth.py
+++ b/tornado/auth.py
@@ -1008,7 +1008,7 @@ class FacebookGraphMixin(OAuth2Mixin):
                       self.authorize_redirect(
                           redirect_uri='/auth/facebookgraph/',
                           client_id=self.settings["facebook_api_key"],
-                          extra_params={"scope": "read_stream,offline_access"})
+                          extra_params={"scope": "user_posts"})
 
         .. testoutput::
            :hide:
-- 
2.47.2