instagram_connect 0.3.0 → 0.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bfea76e8f86d1da429ba916fdf03124bb3eb0a4f0cc8d50bdeb5db838282026a
-  data.tar.gz: b55274a8583dcad12bedca7025517fbfcea36865479f28c520c7c103e8e4d49a
+  metadata.gz: 1d1a0dd271f5e3f830351ddd25d62794b512c7786f125b6aa2f5ea8167db1423
+  data.tar.gz: 0e211865a1e788987b1fdb64f739bb2cde4c08ef57821b6b7602e23b22689cf3
 SHA512:
-  metadata.gz: b9d2f5d664868d9444883e603684bf22e65880d8e75ef65d6014c14a7a6065cdf5d199b1d77c6c3c2f3178c7c804ebc921cdf08966d6c68b2ee18686a1c3a3f4
-  data.tar.gz: d21363ec67aa080df5ff76747cf6f97db0b81963fe66716e7df44e44456dab3cf5b528e502f43c441a967a8d029459d2bb1dcef343b215979524bcc9c068bbbe
+  metadata.gz: 8df4d4149716e96900c767391f73c820b6777f0962c0f7e1d3c4e2522984f7af27da083ce75ada8092bd188dd9897053767e6c1fb2e7654291f6bff7a0c0ce66
+  data.tar.gz: 97a67eb17002fd5611fb76f53fc6e5a852ed8d8a62875f07a367258fe16758fa16556194b82fa61eea270ca131649df78027821618f3aadfb6c9fa92e5f0d269

data/CHANGELOG.md

@@ -6,6 +6,27 @@ All notable changes to this project are documented here. The format follows
 
 ## [Unreleased]
 
+## [0.3.1] - 2026-07-26
+
+### Fixed
+
+- **Connecting an account failed when the Page came from the Login-for-Business asset picker.**
+  `/me/accounts` lists only the Pages a token may *enumerate*. A Page granted through the picker is
+  absent from that listing while reading perfectly well by id, so the list came back empty and the
+  connect was refused — on an account that was correctly linked and fully granted. Identity
+  resolution now falls back to the assets the token actually carries (`/debug_token` granular
+  scopes, which needs no permission beyond the app's own credentials) and reads those Pages by id.
+- **A failed Graph call was reported as a missing account.** `resolve_identity` never checked
+  `Result#success?`, so an expired token or an HTTP 400 produced the same message as an empty list.
+  API failures now raise `ApiError` carrying Meta's own message.
+- **The error message asserted a cause it had not verified.** It claimed no Instagram account was
+  linked to a Page, which was false in exactly the case that triggered it. It now states what was
+  actually checked.
+- **`AccountReadinessJob` had the same flaw**, hunting for a known Page inside `/me/accounts`
+  instead of reading it by id — so the Page-token swap and the webhook subscription failed for the
+  same accounts, silently.
+
+
 ## [0.3.0] - 2026-07-26
 
 Conversations and engagement. The gem parsed 2 of the 15 webhook fields Meta can

data/app/jobs/instagram_connect/account_readiness_job.rb

@@ -87,8 +87,10 @@ module InstagramConnect
         return
       end
 
-      pages = graph_get(account, "/me/accounts", fields: "id,access_token")
-      page = Array(pages["data"]).find { |p| p["id"].to_s == account.page_id.to_s }
+      # Read the Page directly rather than hunting for it in /me/accounts: we
+      # already know its id, and the listing omits Pages granted through the
+      # Login-for-Business asset picker even though they read fine by id.
+      page = graph_get(account, "/#{account.page_id}", fields: "id,access_token")
 
       if page.nil? || page["access_token"].blank?
         account.update!(needs_reconnect: true,

data/lib/instagram_connect/client.rb

@@ -157,6 +157,26 @@ module InstagramConnect
       get("/me/accounts", { fields: "id,name,access_token,instagram_business_account" })
     end
 
+    # One Page by id. /me/accounts answers for the Pages a token may *enumerate*;
+    # this answers for a Page it may *read*. Those are not the same set — a Page
+    # granted through the Login-for-Business asset picker is readable here while
+    # absent from the listing.
+    def page(page_id)
+      get("/#{page_id}", { fields: "id,name,access_token,instagram_business_account" })
+    end
+
+    # The asset ids this token actually carries, from Meta's own record of the
+    # consent. Needs no permission beyond the app's own credentials.
+    def granted_asset_ids
+      result = get("/debug_token", { input_token: access_token,
+                                     access_token: "#{config.app_id}|#{config.app_secret}" })
+      return [] unless result.success?
+
+      Array(result.data.dig("data", "granular_scopes"))
+        .flat_map { |scope| Array(scope["target_ids"]) }
+        .uniq
+    end
+
     # Walks a Graph collection to the end, following Meta's own cursors.
     #
     # Offsets are not safe here: a collection can shift between calls, so an

data/lib/instagram_connect/connect.rb

@@ -35,11 +35,34 @@ module InstagramConnect
     def resolve_identity(data)
       return { ig_user_id: data[:ig_user_id], page_id: data[:page_id] } if data[:ig_user_id]
 
-      result = Client.new(access_token: data[:access_token], config: @config).list_pages
-      page = Array(result.data["data"]).find { |p| p["instagram_business_account"] }
-      raise ConfigurationError, "no Instagram business account is linked to a Page" unless page
+      client = Client.new(access_token: data[:access_token], config: @config)
+      page = candidate_pages(client).find { |p| p["instagram_business_account"] }
+      unless page
+        raise ConfigurationError,
+          "connected, but no Page with a linked Instagram business account was found — " \
+          "checked the Pages this token can list and the assets it was granted"
+      end
 
-      { ig_user_id: page.dig("instagram_business_account", "id"), page_id: page["id"] }
+      { ig_user_id: page.dig("instagram_business_account", "id").to_s, page_id: page["id"].to_s }
+    end
+
+    # /me/accounts lists only the Pages a token may enumerate, and a Page granted
+    # through the Login-for-Business asset picker is not one of them — the list
+    # comes back empty while the Page itself reads fine. So when the listing has
+    # nothing usable, ask the token which assets it carries and read those.
+    def candidate_pages(client)
+      listed = client.list_pages
+      unless listed.success?
+        raise ApiError, "could not read Pages from Instagram: #{listed.error_message}"
+      end
+
+      pages = Array(listed.data["data"])
+      return pages if pages.any? { |p| p["instagram_business_account"] }
+
+      client.granted_asset_ids.filter_map do |id|
+        result = client.page(id)
+        result.data if result.success?
+      end
     end
   end
 end

data/lib/instagram_connect/version.rb

@@ -1,3 +1,3 @@
 module InstagramConnect
-  VERSION = "0.3.0"
+  VERSION = "0.3.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: instagram_connect
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.3.1
 platform: ruby
 authors:
 - Kshitiz Sinha