Meta requires HTTPS, a published Privacy Policy, and the domain to be listed under App Domains. The WordPress callback must be whitelisted under “Valid OAuth Redirect URIs”.
https://your-site.com/wp-login.php?action=tsl_oauth_callback&provider=facebook