We have an application which is registered on Facebook. Authorization passes through it. When we need to get a token, we create a link for the user to follow and allow acces