Without knowing how you've triggered the connection flow, there's no way for me to diagnose this. Are you using ConnectController or ProviderSignInController? Or are you using the new SocialAuthenticationFilter? If you're using ConnectController or ProviderSignInController, when you POST to /connect/facebook (or /signin/facebook) is there a "scope" parameter? If so, what's it set to? Which version of Spring Social?
I know that scoping works with Facebook, because I've been working on some stuff for the past week that heavily depends on it working. But without knowing what you're doing, I'd be guessing at what's wrong.
Spring Social Project Lead