https://developers.facebook.com/docs/authentication/server-side/
https://developers.facebook.com/docs/opengraph/authentication/#referrals
请求token
post发送 https://www.facebook.com/dialog/oauth/?client_id=390158704389561&redirect_uri=https://apps.facebook.com/appnamecactus&state=appnamecactus&scope=read_stream,publish_stream , publish_actions &response_type=token
返回后截获token和有效时间
https://developers.facebook.com/docs/reference/api/post/
发送public post请求
https://graph.facebook.com/me/feed?message=everyhguonwqeqwewe&privacy=%7B%22value%22%3A%22EVERYONE%22%7D&access_token=AAAFi2Ob7LbkBAKYt6zkhL8X8GE4KvAf4MAZARdXriGXT1PoIP1vZCZC2MSAgYAaD6eBa0r1nE17iD6gj5tvgfsZBpZBWf69ZBaYmUkDgVlEAvz3sVYojoh
BTW:
发送的是公共消息，需要在你的facebookapp应用中设置public并且用户安装你app时同意，和token中有read_stream,publish_actions权限。
privacy参数也是设置发送的可见性，是json格式，（http://www.w3schools.com/tags/ref_urlencode.asp json转换特殊符号）
获取头像
https://graph.facebook.com/100003794451730/picture
100003794451730为id
https://developers.facebook.com/docs/reference/api/
搜索公共消息
https://graph.facebook.com/search?q=ufc152&type=post
q中填写搜索内容，貌似现在不可以多个拼接
https://developers.facebook.com/docs/howtos/login-with-facebook-using-ios-sdk/
offline_access
In the past, using Facebook services when a user was not actively interacting with your application required a special permission called 'offline_access'. This permission is no longer required and will soon be deactivated.
If you have an older application that was using this permission you can learn more about how to upgrading access tokens (https://developers.facebook.com/roadmap/offline-access-removal/).