# Instagram and Facebook oEmbed API to stop working, what about Onebox?

**URL:** https://meta.discourse.org/t/instagram-and-facebook-oembed-api-to-stop-working-what-about-onebox/164242
**Category:** Feature
**Created:** [September 16, 2020, 3:57pm UTC](https://meta.discourse.org/t/instagram-and-facebook-oembed-api-to-stop-working-what-about-onebox/164242 "2020-09-16T15:57:19Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![rmens](https://avatars.discourse-cdn.com/v4/letter/r/3ab097/32.png) [@rmens](https://meta.discourse.org/u/rmens)
#### Post date: [September 16, 2020, 3:57pm UTC](https://meta.discourse.org/t/instagram-and-facebook-oembed-api-to-stop-working-what-about-onebox/164242/1 "2020-09-16T15:57:19Z")

</div>

On the 24th of October the unauthenticated oEmbed API from Facebook and Instagram will stop working. They will require authentication to fetch oEmbed objects.

Are there any consequences for Onebox? I couldn’t find any changes in the GitHub repo regarding this yet.

[https://developers.facebook.com/docs/plugins/oembed-legacy](https://developers.facebook.com/docs/plugins/oembed-legacy)

---

<div class="post-metadata">

### Author: ![Terrapop](https://avatars.discourse-cdn.com/v4/letter/t/ecd19e/32.png) [@Terrapop](https://meta.discourse.org/u/Terrapop)
#### Post date: [September 16, 2020, 4:03pm UTC](https://meta.discourse.org/t/instagram-and-facebook-oembed-api-to-stop-working-what-about-onebox/164242/2 "2020-09-16T16:03:22Z")

</div>

A good point needs to be addressed. You have to provide API keys like for rendering Twitter embeds going forward.

`The Facebook oEmbed endpoints require either an App Access Token (recommended) or Client Access Token.`

[https://developers.facebook.com/docs/plugins/oembed](https://developers.facebook.com/docs/plugins/oembed)

---

<div class="post-metadata">

### Author: ![rmens](https://avatars.discourse-cdn.com/v4/letter/r/3ab097/32.png) [@rmens](https://meta.discourse.org/u/rmens)
#### Post date: [October 28, 2020, 7:07pm UTC](https://meta.discourse.org/t/instagram-and-facebook-oembed-api-to-stop-working-what-about-onebox/164242/3 "2020-10-28T19:07:23Z")

</div>

The new policies are now in effect. Instagram seems to be broken here and on self-hosted sites (updated to v2.6.0.beta4)

[https://www.instagram.com/p/CGz4LkeAQlW/](https://www.instagram.com/p/CGz4LkeAQlW/)

Facebook links work however

> **[De Telegraaf](https://www.facebook.com/telegraaf/posts/3872461302809469)**
>
> Tv-programma Opsporing Verzocht tijdelijk van de buis?

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [November 2, 2020, 5:50pm UTC](https://meta.discourse.org/t/instagram-and-facebook-oembed-api-to-stop-working-what-about-onebox/164242/4 "2020-11-02T17:50:39Z")

</div>

Yes @jamie.wilson is working on this.

---

<div class="post-metadata">

### Author: ![jamie.wilson](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jamie.wilson/32/185466_2.png) [@jamie.wilson](https://meta.discourse.org/u/jamie.wilson)
#### Post date: [November 20, 2020, 9:59pm UTC](https://meta.discourse.org/t/instagram-and-facebook-oembed-api-to-stop-working-what-about-onebox/164242/6 "2020-11-20T21:59:20Z")

</div>

If you’re running an up-to-date Discourse instance you should now be able to add a token that will allow oneboxes to be generated using the new API.

I’ve not yet written up step-by-step instructions on how to generate the token, but if you are comfortable in Facebook’s developer site you can go through the ‘Requirements’ listed here:

[https://developers.facebook.com/docs/instagram/oembed](https://developers.facebook.com/docs/instagram/oembed)

to generate a token. That token can then be entered as the value for the `facebook_app_access_token` SiteSetting.

[https://www.instagram.com/p/CHd1gmNDuqI/](https://www.instagram.com/p/CHd1gmNDuqI/)

---

<div class="post-metadata">

### Author: ![ljpp](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ljpp/32/96506_2.png) [@ljpp](https://meta.discourse.org/u/ljpp)
#### Post date: [November 28, 2020, 10:01pm UTC](https://meta.discourse.org/t/instagram-and-facebook-oembed-api-to-stop-working-what-about-onebox/164242/7 "2020-11-28T22:01:04Z")

</div>

> [@jamie.wilson](#):
>
> I’ve not yet written up step-by-step instructions on how to generate the token

1. Add Product **oEmbed** to your app
2. Under Settings - Advanced, find the **Client Token**
3. And finally **combine in a your App ID numbers and the token** and ad a pipe `|` character in between: `12324323|asdasdasdasd` ← That is what you need put to the Discourse setting.

---

<div class="post-metadata">

### Author: ![bartv](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/bartv/32/130052_2.png) [@bartv](https://meta.discourse.org/u/bartv)
#### Post date: [December 2, 2020, 8:37am UTC](https://meta.discourse.org/t/instagram-and-facebook-oembed-api-to-stop-working-what-about-onebox/164242/8 "2020-12-02T08:37:56Z")

</div>

Hi Jamie,

I’d love that step-by-step guide 🙂

---

<div class="post-metadata">

### Author: ![tshenry](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tshenry/32/119495_2.png) [@tshenry](https://meta.discourse.org/u/tshenry)
#### Post date: [April 6, 2022, 10:17pm UTC](https://meta.discourse.org/t/instagram-and-facebook-oembed-api-to-stop-working-what-about-onebox/164242/9 "2022-04-06T22:17:13Z")

</div>

14 posts were split to a new topic: [How to obtain an App Token to allow Instagram Oneboxes](https://meta.discourse.org/t/how-to-obtain-an-app-token-to-allow-instagram-oneboxes/223548)
