Facebook Authentication Request within an Iframe
===

I wanted to test if Facebook allows such kind of authentication requests: <br />

      <iframe src="  https://www.facebook.com/dialog/oauth?client_id=my_id&redirect_uri=my_uri&scope=email,publish_stream&type=web_server"></iframe>

It worked for me.<br />
Why does it work? - **Should it work?** - what about click-jacking?<br />
And when does Facebook block requests similar to this one?<br />