Using Facebook Graph API In Flash AS3
December 4, 2010


Facebook requires the use of OAUTH2.0 nowadays. Some of the changes required are:

  • session is now called authResponse.
  • getSession is replaced with getAuthResponse.
  • perms is now called scope.

The zip file ( linked below includes these changes (there are changes in .as, .html files and in the first frame of the example .FLA). Please keep this in mind.

This example is a beginner’s How To use the Flash Facebook API (facebook-actionscript-api), in particular in authenticating user and loading the user’s name in Flash applications. It assumes that you are already familiar with the Facebook Graph API and adding application in Facebook (you need an Application ID to make this example).

Note: This tutorial is built upon facebook-actionscript-api 1.0. Now that version 1.5 has been released, I highly recommend using it if you are just starting out. Some of the quirks in 1.0 has been removed from 1.5. Go over here to read the updated guide: /blog/using-facebook-graph-api-in-flash-as3-1-5/


When you set-up your application, set the application as IFrame (not FBML) application. Below is an example of the settings that I use:



1. Download the facebook-actionscript-api from: I have included the version I used for this example in the ZIP file at the end of this article. (Note: This tutorial uses version 1.0 and apparently the latest version, starting from 1.5 contained some changes in the JavaScript side. I recommend using the version I use to follow the general idea. The link to the files that I use is in the bottom of this tutorial.)

2. Start up Flash IDE and create a new project (I am using CS3, but this guide should apply to CS4 and 5 too).

3. Extract the GraphAPI into a folder. You might also want to extract GraphAPI somewhere because we will be using the JavaScript and html file from that example later.
Note that The GraphAPI contains examples for Flex Builder 4, and this guide will show you how to use the API in the Flash IDE.

3a. Much of the code is ported from the GraphAPI Examples_1_0FacebookAPI_Sept_08_2010_samplesWebIFrameDemo, so create a copy of this folder and I recommend saving the project that we are going to make there — for simplicity sake, again because we are going to use the pre-created JavaScript and html file from that example.

4. Add the classpath of where you extracted the GraphAPI into the project settings.
Ie: ./GraphAPI Source_1_0/api/

5. Create a button on the screen, name it “loginButton.”

6. Create a textfield on the screen, name it “nameTextField

7. Add code to Frame 1 of the FLA (Again this code is ported from the GraphAPI Examples_1_0FacebookAPI_Sept_08_2010_samplesWebIFrameDemo so you will see a lot of similarities):

First, we load up the Facebook API library:

import com.facebook.graph.Facebook;

Next, call Facebook.init().

// Change the APP ID with your own APP id.
Facebook.init('YOUR_APP_ID', handleLogin);

function handleLogin(response:Object, fail:Object):void
  if (response == null)
    //resultTxt.text += 'Error login session';'redirect');

Facebook.init() passes the callback (in the second parameter) to a function named handleLogin(), which checks whether the user is already logged in or not. If the user is logged in, it will call changeToLoginState() function, which we will see later. If user is not logged in, then it will call a Javascript function named redirect(). Again, we will see this function later.

Right now, let’s hook up the loginButton to log us into Facebook first.

loginButton.addEventListener(MouseEvent.CLICK, onLoginButtonClicked);

function onLoginButtonClicked(event:MouseEvent):void
  if (Facebook.getSession()==null ||
    Facebook.getSession().uid == null)
If you want to request extended permissions, you can pass it as parameters to the login call. For example, below is how to request publish_stream permission:
Facebook.login(handleLogin, {perms:'publish_stream'});

Following that, let’s add the changeToLoginState() function, like below. This code changes the button label to Logout to allow user to logout.

function changeToLoginState():void
  //resultTxt.text += 'Logged in';
  loginButton.label = 'Logout';

Now, in a real application, you can start using other Facebook API once the user is confirmed as logged-in. For this example, to demonstrate that we are indeed logged in, I am just going to call a custom function named loadMyInfo() to get the user name.

And here is the loadMyInfo() function. Following the Graphi API documentation, to get your own info, you can call:

So that’s what we will do:

function loadMyInfo():void
  Facebook.api('/me', onMyInfoLoaded);

// Display my name in the text field.
function onMyInfoLoaded(response:Object,fail:Object):void
  trace("onMyInfoLoaded ";;

Above, I called the /me API and then printed the user name in the callback function. It’s as simple as that. If you are interested about how the API works, continue here, otherwise, skip to Step 8.

It’s nice to know that you can call most of the Graph API’s ( using the Facebook.api() in this manner. Once you get a hang of the process, you should take a look into that comes in the facebook-actionscript-api.

public static function api(method:String,
callback:Function = null,
params:* = null,
requestMethod:String = 'GET'

This is a very powerful function and you can do a lot by calling the Graph API using just this one function. If you are already familiar with the JavaScript version of the API, it’s almost effortless. Notice also that the callback parameter is a function that follows this format:

function callback(response:Object, fail:Object):void

One question is: How do you know what is inside the response object? You can always do foreach to print each variables, or you can test most of the API from this page to see the return value in the response object : For instance, the /me call returned this:

"id": "9999999999999999999999",
"name": "Permadi Permadi",
"first_name": "Permadi",
"last_name": "Permadi",
"link": "",
"birthday": "01/01/1990",
"gender": "male",
"timezone": -8,
"locale": "en_US",
"verified": true

You can explore more examples here:


  • Posting to user Photo Album Now we are almost ready with the Flash movie. Publish the movie as example.swf&nbsp

    9. Create the html page to host the SWF. You can use the one exported by the FLash IDE, but you will need to change a lot of the code, so just use the template below, which is taken from GraphAPI Examples_1_0FacebookAPI_Sept_08_2010_samplesWebIFrameDemo.

    <html xmlns="" xmlns:fb="">
    <!-- Include support librarys first -->
    <script type="text/javascript" src=""></script>
    <script type="text/javascript" src=""></script>
    <script type="text/javascript" src=""></script>
    <!-- Include FBJSBridge to allow for SWF to Facebook communication. -->
    <script type="text/javascript" src="FBJSBridge.js"></script>
    <script type="text/javascript">
    function embedPlayer() {
      var flashvars = {};
      embedSWF("example.swf", "FlashDiv", "550", "250", "9.0");
    function init() {
    function redirect() {
      var params = window.location.toString().slice(window.location.toString().indexOf('?'));
      top.location = ',publish_stream,offline_access,read_stream&redirect_uri='+params;
      <div id="fb-root">
    <div id="FlashDiv">
      <h1>You need at least Flash Player 9.0 to view this page.</h1><p><a href=""><img src="" alt="Get Adobe Flash player" /></a></p>


    • The file FBJSBridge.js also comes from the GraphAPI Examples_1_0 in FacebookAPI_Sept_08_2010_samplesWebIFrameDemo folder.
    • Above, where you see the redirect() function, you should change the redirect_uri to the URL of where your html is located at. This redirect() function is called when user is not logged in to Facebook when entering your application.
    • Change embed.swf with the name of your SWF file if necessary.
    • Change the dimensions if necessary.
    • Alert: The params variable within the Javascript redirect() function assumes that there’s a query-string in your URL. If you are using static html or have no use for the query-string, then you should just remove all references to params. Eq:
      function redirect() {
        top.location = ',publish_stream,offline_access,read_stream&redirect_uri=';

      Alternatively, you can always append a dummy query string at the end of your url.
      So if my page is, I need to call it with, where ?test is the dummy query-string. Of course you can always alter the Javascript to handle this more elegantly. Failure to properly pass the redirect_uri will cause the app not to load after the login process.

    • The embedSWF in FBJSBridge.js is NOT the same as the one in swfobject.js, so you need to be careful not to use the same code that you use for SWFObject. In particular, the FBJSBrige.js changes the position of expressInstallSwfUrl to be the last parameter:
      function embedSWF(path, divID, width, height, playerVersion, flashVars,
                        params, attributes, expressInstallSwfurl)

    To test the movie, you need to run the swf from the html. You cannot use the test movie feature within Flash IDE because the movie needs to communicate with JavaScript. So you should publish the movie and test by opening the html.

    For starting out, I highly recommend to upload all the published files to a server for testing the redirect() (and make sure your Facebook app base URL is set to that website folder). If you are testing locally and receive permission error, you can add your local machine to the Flash Settings to allow communication.



    Credit to the facebook-actionscript-api to which comes under MIT license.