Facebook session key question

[Etienne_123]

Hi I'm using a WebBrowser control to enable users to browse Facebook, or atleast this is my goal. Once I retrieved a Facebook session key, how do I redirect the browser to the Facebook Home page? Also, can I store a session key for each user and use this to log them in without having to prompt them for login details each time? I retrieve the session key by directing the web browser to the url below and then intercepting this url:

browserFacebook.Navigate(@"http://www.facebook.com/login.php?api\_key=" + FacebookAPIKey + @"&connect_display=popup&v=1.0&
next=http://www.facebook.com/connect/login\_success.html&cancel\_url=http://www.facebook.com/connect/login\_failure.html&
fbconnect=true&return_session=true&session_key_only=true&req_perms=read_stream,publish_stream,offline_access");

[Lost User]

I'm not familiar with Facebook, but isn't the API key tied to the application? (As opposed to the user?) You can register your application here[^], and they'll provide a key for your application.

I are Troll :suss:

[Etienne_123]

Yes it is, but I was talking about the session key, not the API key :)

[Lost User]

The Session is only valid for 24 hours.

I are Troll :suss:

[Etienne_123]

Apparently not if you set the expiry time to 0. Anyway, I don't think this is the best way to try and implement single sign-on. I'm just giving it a shot since I'm kind of at a dead end. I've got all the users' usernames and passwords, I just need to find a way to log them in automatically :(

[Lost User]

Etienne_123 wrote:

Apparently not if you set the expiry time to 0.

Don't know where you got this information, but the docs[^] state something else;

Users don't log out of desktop applications. A user's session expires after 24 hours,
or when the user closes your application. If you need to, you can terminate a user's
session by calling auth.expireSession.

I are Troll :suss:

[Etienne_123]

Exactly - OR when the user closes the application. My application is meant to be run 24/7.

[Lost User]

Is that a AND/OR or XOR? Sessions are usually temporary, and according to the docs I just been reading, you'd want to request "offline access". See the bottom of this[^] page.

I are Troll :suss: