All the settings should be right. The facebook app id and app secret are right. In facebook for developers i can see the calls for gr:get:User/friends from Playfab. Only think that i didn't do is app review, but I'm testing it on test users that have the user_friends permission, so it should work i guess ? All the test users are linked to PlayFab ofc. Also I'm using
FB.LogInWithReadPermissions(new List<string>() { "user_friends", "public_profile", "email" }
to get the token. I also tried to change it to FB.LogInWithPublishPermissions but still same result. Also in facebook for developers the app is set to developer mode, so the test users should have all permissions. The test users are friends ofc.