Make sure you have error-handling everywhere. FB API fails in a lot of random and unexpected ways…

It's a mess even using their own SDK 😕

@wojciech you got me there - I have no error handling so far

although most of the server handling should be server side, rather than client side, right?

With their SDK the flow was: you ask the user to login through web/fb-application and once they did you'd get an access token or an error message what went wrong

However, many time instead I'd get a 500, or a 4xx with no error message

Even I think a 200, but wihtout a token

Once I got the token I'd send it to my server and it'd its own validations

I'm not sure how it fits into doing OAuth manually

@wojciech yeah I had a similar experience with the FB sdk

lots of login failures

I'm now using the OAuth "Web" flow, which delegates a lot of the work to the server