Way to Prevent Repeated Auth Calls for Facebook User? about django-facebook HOT 2 CLOSED

Hi,

What you are suggesting makes sense, however it is an unfortunate design requirement that we don't call auth.login(request, user) which would cache the login credentials and prevent authenticate from being called again.

This is because facebook's cookie needs to be constantly checked against the facebook server otherwise you can end up with strange situations where the user is logged in with django, but not logged in with facebook.

It should be possible to cache the django session just long enough to only renew when the facebook cookie is about to expire, good luck :)

from django-facebook.

Closing

from django-facebook.