Design for Facebook authentication in an iOS app that also accesses a secured web service

I just dealt with this myself, and here’s the part that bit me:

In your step 5… It’s possible for a user to register for an account with you entirely separate from their Facebook ID, right? Then some other time they log in with Facebook…. And you just created them a second account and lost their first one.

There needs to be a way to be logged in to your web service, then log in to facebook, and capture the association between the facebook ID and the local account.

Apart from that, your plan sounds solid.

Update: Facebook has added a doc outlining such a scenario HERE

Leave a Comment