It seems that Facebook applications created a long time ago can return all the profile fields including email even if you do not explicitly request the fields in the API call parameters, as it will support the current minimum version.
Take a look at your App developer page to see what API version it says. For my test app it says 2.0 although it will upgrade 2.1 on August 8.
developers.facebook.com/apps/
Anyway, maybe I should update the example scripts just to request the fields explicitly and it works with all versions.
As for the email scope it is really necessary to pass when requesting authorization, or else it is not returned.
If it is returned when you did not pass the email scope, that is because the user has already authorized your app to provide the email before.
If you remove your app from the user configurations and Facebook to force it to restart the process and you do not ask for the email scope, you can see that it does not return the email address even if you put it in the fields parameters.
Manuel Lemos - 2016-08-07 04:52:51 - In reply to 
