PeledYuval

Meta offers an OAuth based API for Instagram. Many companies and tools are built on and rely on this API for their product & daily operations.

Beginning Friday evening (US time), a critical endpoint in this API has broken. The endpoint creates long-lived access tokens, so it is in the critical path for almost any company using the API.

I find it disappointing that a leading technological company does not acknowledge a bug that's been reported to them several times more than 24 hours ago, even if to say that's it's being investigated.

The endpoint: https://developers.facebook.com/docs/instagram-basic-display-api/guides/long-lived-access-tokens#get-a-long-lived-token

Currently the API returns a Bad Request with a wrong error message (the endpoint should support "GET"): ``` { "message": "Unsupported request - method type: get", "type": "IGApiException", "code": 100, "fbtrace_id": "AuDYqK74IrT9Yt2Sx51UlP6" } ```

I have opened a bug report but received no response. Facebook's status page shows all green in the API section: https://metastatus.com/ There are several Meta Developers Community threads with no response

Hi HN,

I believe Google has a grave authentication issue and I cannot burst the impenetrable tier-1 support wall to solve it. Hopefully I'm wrong, but for the life of me and the support reps I talked to, we cannot get a stranger logged out of my YouTube account.

The stranger is using my YouTube account through my old Smart TV that I gave away (my bad for not logging out, but there should be recourse for this).

Once I discovered this, I have changed passwords and revoked auth tokens on all relevant services (Spotify, Disney+, etc.). All services no longer show the stranger accessing them - with the exception of YouTube.

The actions I've taken multiple times (as instructed by Google support): - Changed my Google account's password - Revoked all "devices I trust" under my 2FA settings - Logged out of all devices in the "Your Devices" list

This did force me to log back in on my own devices (phone, TV), but I still see new videos that the stranger watched in my YouTube history. This has been happening for weeks.

Google support walked me through these steps and then gave generic "make sure your password are strong" article links, but of course, refuse to escalate this.

If you wish, you can view the support transcripts here (I admittedly got a little short during the 2nd conversation, which I regret): https://pastebin.com/GypwBPFj

---

Some details:

- The videos in my view history are in Arabic, so I know it's the stranger who watches them

- I know the stranger has access through my old TV because I saw their activity on all apps I had installed on my TV, and I saw my old TV signed in from a distant city under "Your Devices" list

I want to broaden my horizon regarding how things are solved in the real world. Other than some very high-profile companies (like Netflix, github) and companies that I've worked at, it's hard for me to find easily digestible (20-60 mins) examples of actual working architecture of differently sized companies from different business verticals.

Hi HN, a niche Typescript+parsers question.

I'm looking for resources that will allow me to write a parser inside of Typescript's type system by leveraging template literal types.

Reasoning: I'm writing a Typescript library that allows compile-time checks for raw SQL queries. The goal is to allow compile time safety for queries without reliance on an ORM query builder or manually maintained type hints. It would look roughly like so:

  // some type of DB structure definition. This will definitely change
  const dbSchema = { person: {name: 'varchar', born_at: 'timestamptz' }};
  // Throws compile time error since "address" does not exist in "person" table
  query<typeof dbSchema>('SELECT address FROM person');

I have a (more complicated) POC of this here: https://github.com/Yuval-Peled/Tequel

Thanks in advance

EDIT: Punctuation