A partir del 01/08/2018 Facebook dejará obsoleto el scope publish_actions que era necesario para obtener datos del usuario para realizar LIVE LOGIN FACEBOOK o REGISTER LOGIN FACEBOOK, en cualquier app o api web.

Aquí el link donde FB comunica el cambio de política en su seguridad:

https://developers.facebook.com/blog/post/2018/04/24/new-facebook-platform-product-changes-policy-updates/

The publish_actions permission will be deprecated. This permission granted apps access to publish posts to Facebook as the logged in user. Apps created from today onwards will not have access to this permission. Apps created before today that have been previously approved to request publish_actions can continue to do so until August 1, 2018. No further apps will be approved to use publish_actions via app review. Developers currently utilizing publish_actions are encouraged to switch to Facebook’s Share dialogs for web, iOS and Android.

En este otro link:

https://developers.facebook.com/docs/apps/review

default y email scope están pre-aprobados por defecto, por lo que los datos del usuario como first_name,  midle_name, last_name, email,id ….