即使使用Facebook Connect登录，也强制用户输入登录

Question

I have an implementation of Faceebook connect and I have noticed that if you are already logged in to facebook and hit connect, you wont be prompted for your login credentials (because it takes current session data).

Is there anyway to make Facebook connect not use the currently logged in user and force each connect to enter their login/pw?

Answer 1

实际上我相信如果你已经安装了facebook应用程序，它会绕过第二个窗口。

Answer 2

This is possible using re-authentication. Quoting:

In apps where security is very important, you may want to double-check someone's identity - perhaps before they make a purchase within the app, or use it to access some sensitive personal data.

To prevent situations where a user could leave a device logged in or man-in-the-middle hijacking of the user session, re-authentication forces a person to re-enter their Facebook password before they can continue to use your app.

For more information, see:

https://developers.facebook.com/docs/howtos/login/client-side-re-auth/

Answer 3

Go to facebook App settings. under Advance tab look for "Force Web OAuth Reauthentication" make that YES. and save it.

From now on your login will ask for user password every time even if facebook browser session is present.