Facebook doesn't logout completely-ios

Question

while i was trying to integrate fbsdk(facebook) to my app ,it's login session working perfectly.But while i log out from mp app,it does show log out actionsheet and i can logout it easily.But when i try to login again to the facebook it goes directly to the facebook confirmation page instead of going to the login page details.Hope your help.

codes i used for logout.

  FBSDKLoginManager *manager = [[FBSDKLoginManager alloc] init];
            [FBSDKAccessToken setCurrentAccessToken:nil];
            [FBSession.activeSession closeAndClearTokenInformation];

            NSHTTPCookieStorage *storage = [NSHTTPCookieStorage sharedHTTPCookieStorage];
            for(NSHTTPCookie *cookie in [storage cookies])
            {
                NSString *domainName = [cookie domain];
                NSRange domainRange = [domainName rangeOfString:@"facebook"];
                if(domainRange.length > 0)
                {
                    [storage deleteCookie:cookie];
                }
            }
            [manager logOut];

this is becuase when you log out of your app on the client side, in app, you aren't actually deleting the facebook permission to your app from that user — Larry Pickles, Aug 18 '15 at 05:49
http://stackoverflow.com/questions/30092610/facebook-logout-is-not-working-in-new-sdk-v-4-1-0-in-ios — Kirit Modi, Aug 18 '15 at 05:52
@AbdulNouzil Objective C Solution:- FBSDKGraphRequest *deleteRequest = [[FBSDKGraphRequest alloc] initWithGraphPath:@"me/permissions/" parameters:nil HTTPMethod:@"DELETE"]; [deleteRequest startWithCompletionHandler:^(FBSDKGraphRequestConnection *connection, id result, NSError *error) { if (!error) NSLog(@"deleted"); }]; — Darshan Mothreja, May 19 '16 at 10:18

score 3 · Answer 1 · answered Aug 18 '15 at 06:35

It dsnt happen coz facebook login is done by either Safari OR facebook app (If facebook app is installed in your phone and you have added it in settings account).

This is because, Safari holds facebook session and keeps it as cookies. And in case of Facebook app, if it is connected to settings accounts, it will continue to hold the session untill you logout manually. Logging out manually from safari or facebook app or clearing cookies of safari is the only way to logout from facebook if it is already logged in.

score 0 · Answer 2 · answered Aug 18 '15 at 05:51

0

If you want to REVOKE all permissions, then you must do this:

[[[FBSDKGraphRequest alloc] initWithGraphPath:@"me/permissions" parameters:nil 
    HTTPMethod:@"DELETE"] startWithCompletionHandler:^(FBSDKGraphRequestConnection *connection, id result, NSError *error) {
  // ...
}];

https://developers.facebook.com/docs/facebook-login/permissions/v2.4

But, even this doesn't really guarantee that your app will be removed from access to the user through Facebook, again, what you are doing is basically deactivating an active token with the facebook logout, but YOU ARE NOT removing permissions for this user through facebook.

This is sort of crappy if you really want to remove users or if users want to remove YOUR app from their Facebook account, but this as far as you can go UNLESS the user themself removes permissions in their facebook account manually, here's what facebook has to say about this:

Revoking Login

You can also let people completely de-authorize an app, or revoke login, by making a call to this Graph API endpoint:
DELETE /{user-id}/permissions
This request must be made with a valid user access token or an app access token for the current app. If the request is successful, your app receives a response of true. If the call is successful, any user access token for the person will be invalidated and they will have to log in again. Because you're de-authorizing your app, they will also have to grant access to your app as if they were logging in for the first time.

answered Aug 18 '15 at 05:51

Larry Pickles

4,615
2
19
36

you have to use the Facebook SDK for ios, it looks like you are already using it, right? – Larry Pickles Aug 18 '15 at 06:31
s.. 'Facebook-iOS-SDK', '3.14.1' – Abdul Nouzil Aug 18 '15 at 06:40
@ Larcerax ,when i tried for calling...response received... Error Domain=NSURLErrorDomain Code=-1002 "unsupported URL" UserInfo=0x7f862293a1c0 {NSUnderlyingError=0x7f8624f5cc40 "unsupported URL", NSErrorFailingURLStringKey=(null)?format=json&include_headers=false&sdk=ios, NSErrorFailingURLKey=(null)?format=json&include_headers=false&sdk=ios, NSLocalizedDescription=unsupported URL} – Abdul Nouzil Aug 18 '15 at 07:03
Ahh, Abdul, that's why, you are using 3.14.1 – Larry Pickles Aug 18 '15 at 07:06
this is for 4.5+ You should update your facebook SDK I would think! – Larry Pickles Aug 18 '15 at 07:07
@ Larcerax: sorry it's the latest itself..using FBSDKCoreKit,FBSDKLoginKit..This 'Facebook-iOS-SDK', '3.14.1' was my old pod used sdk.I forgot to remove it.Anyway but with the latest fbsdk am getting the above error. – Abdul Nouzil Aug 18 '15 at 08:40
OH yeah, i read your QUESTION again, and YEAH, I'm too tired for this stuff, so, Saheb's answer is right – Larry Pickles Aug 18 '15 at 08:45
this is just a matter of you clearning you cookies, if you want to REVOKE all permissions you do it my way, but you probably want to do what Saheb is talking about in his answer, he's right – Larry Pickles Aug 18 '15 at 08:46
but i already tried as per Saheb's opinion, above as can u see in my code..clearing cookies.even so,the same confirmation page after logging out.what to do? – Abdul Nouzil Aug 18 '15 at 08:55
afer trying a lot ,finally it got cleared by making FBSDKLoginManager *login = [[FBSDKLoginManager alloc] init]; login.loginBehavior = FBSDKLoginBehaviorWeb; – Abdul Nouzil Aug 18 '15 at 11:35

score 0 · Answer 3 · answered Feb 19 '16 at 08:24

I have reported this to Facebook both as a bug and later as a security concern (you log out of something and then you can log in later without using a password again...).

They answered that this is not a bug, but a feature. "By design".

The only way to log out seems to be to call an url from the phone: https://m.facebook.com/logout.php?h=[a 16 character long token-like string]&t=[10 char long number]&refid=[a number]

From this the "h" attribute seems to be obligatory. If you omit everything else, it still works. One problem though: I don't know what this string is. Any ideas?

Or other methods to log out?

score 0 · Answer 4 · answered Feb 20 '16 at 10:59

0

Use this ... [FBSDKProfile enableUpdatesOnAccessTokenChange:YES];

answered Feb 20 '16 at 10:59

Sabby

403
3
15

also you need to logout from safari or from the browser you logged in – Sabby Feb 20 '16 at 11:48

Facebook doesn't logout completely-ios

4 Answers4