Using Facebook to allow authentication - auto log out and other issues (discussion)

Get Started
1

Hi

We have implemented the ability for a user to authenticate / create an account via Facebook. The only other way to create account / authenticate is with email.

Everything seems to be working fine, however when a user logs out of my web app - their session on Facebook is also disconnected. I believe this is expected - and I can understand why Facebook do this. However, I believe it may be more of an inconvenience, and I have noticed this is not the case with other web apps such as soundcloud.

So the question
Is it ok to override this (where a user is automatically logged out when they log into Facaebook)
Should we ask a new user registering to also create a username / password for our webapp (provided we are secure), or is this going to be a barrier for us? Are there advantages / disadvantages?

Cheers.

2

Could really use some advice on this one, got a dev on dif job then jumping onto this.

3

Ok so the auto log out is expected - we are using this method:

But I still have questions about a few things. Once authenticated and I log out of my app - my FB session is lost - but what if I want to stay in FB? This would annoy me.

Also what if I select “keep me signed in”?

Every app I have tested in allows me to remain authenticated when I log out of a Facebook.