fb_connect fails to logout properly

That would be somewhat expected. Facebook uses single session logins. Meaning, you log into one page and you are automatically signed in for all pages. Drupal for Facebook, in essence, merges your site's user account system with Facebook. That is my understanding. What I am experiencing is an immediate refresh of the page on logout (expected) and then my closed session is reopened (unexpected and potentially dangerous, especially on a shared or public computer.)

I continue to look for a solution other than disabling the fb_user.module. Any help would be appreciated.

Dave, I just uploaded the newest dev version to my site. The misbehavior has disappeared, mostly. I resynced my fb properties. It gave me the correct values for https rather than http. However, I am now getting a "Session hijack attempt detected for user Mykal Funk!" error in my dblog report whenever I log out. That would be the Secure Pages Hijack Prevention module, part of the Secure Pages project. I tried to disable the Secure Pages Hijack Prevention module, but it just returned with the old behavior of closing and reopening the account.

I changed the category and the priority since I don't think we're looking for a bug exactly. Somehow Secure Pages is not playing nice with Drupal for Facebook. I will need to investigate some more. Dave, any ideas as to what to do and where to look? I'm going to scour the issue queue for the Secure Pages project, in the meanwhile.

Correction: the Secure Pages Hijack Prevention module is its own project.

I'm not too sure what it is detecting. I'm currently experimenting with setting the session.cookie_secure to true and disabling the hijack prevention module. I'm getting all sorts of access denied errors to sort through. I am also rereading the README.TXT file and other documentation in case I missed something. I attached a screenshot of one minute of my dblog where I'm attempting to log out -- today at 11:51 am -- before I started messing with the session.cookie_secure setting.

Thanks for you time, Dave.

I've gotten the stubborn thing to log in, but once I do I'm redirected back to the home page, Without any evidence of being logged on! Even my admin account logs in funny, and it is not hooked to a Facebook account. I have set session.cookie_secure to true and added an if statement to change my $base_url to "https://" if it detects a secure server. These were added to my settings.php I also disabled the Secure Pages Hijack Prevention module. You don't really need it if you are enforcing secure cookies.

If I directly input /user/login in the address bar I am sometimes can be redirected to a user account not hooked to Facebook. If I use a link it gives me the address of "node?_fb_user_fbu=10000194386xxxx" no matter which browser (IE, FF3, Chrome) I'm using. I continue to search for answers but any help would be appreciated.

I upgraded to 6.x-3.0-rc8 (I used update.php). I have disabled SSL, Secure Pages, Boost, LoginToboggan, Global Redirect, Path Redirect, Toggle WWW, and I unchecked the "Set FB Cookie" setting one at a time. What other modules don't work right with Drupal for Facebook? The session.cookie_secure flag is set to false. Unsetting the FB Cookie made it so I could log out, but now when I click the Facebook connect button, nothing happens. I have cleared cookies and cache. I have read the README.TXT twice, ran every search query I can think of, and I am not any closer to a solution.

JoshuaBud, are you using your site as a canvas page within Facebook or as a standalone site using Facebook for authentication? I'm using Facebook for authentication purposes. I'm interested in knowing if your problem relates to mine in some fashion. That might be a productive troubleshooting path if it is.

"I read the README.txt from start to finish." I have added the block of code to my settings.php file. I was inspecting the console on Firebug and Chrome. The console reads "FB.logout() called before calling FB.init()". This is similar to issue #940018: FB Connect Unstable: FB.login() called before calling FB.init(). I am also getting a "Drupal.settings.fb is undefined" occasionally.

I don't know how to reproduce this other that to say I'm using a stock 6.20 core, Drupal for Facebook 6.x-3.0-rc8, and numerous other contributed modules. If I need to list them, please say so.

I have re-enabled all of the modules and reset the "Set FB Cookie" setting. I am getting the following behavior: logout, page refreshes, sometimes with an access denied page shows up, navigate to <front> and I'm still logged in.

Thanks Dave for the pointer. I'm closer to getting it to work. I found two references to all.js in the page source. I had pasted some code for a like box into a block and ran that in the footer region. Once I disabled that, the behavior changed noticablly. Here is a summary of what is happening in each browser I've tested in.

IE: Everthing seems normal

FF3: Login is as expected. The Status Report says that the session is closed than it is immediately reopened on logout.

Chrome: I login but have to refresh the page manually to see that I am logged in. Logout is as expected.

Opera: Logs in like Chrome, and logs out like FF3.

Safari: Nothing works.

I am also getting a "fb_ajax_event called badly. Not passed apikey" error. The location is "https://www.cyberatory.net/live/fb/ajax/session_change" and the referring url is"http://www.cyberatory.net/live/user/login?destination=node". It also gave a trace:

Array
(
    [0] => Array
        (
            [function] => fb_ajax_event
            [args] => Array
                (
                    [0] => session_change
                )

        )

    [1] => Array
        (
            [file] => /home/cybxxxx/public_html/live/includes/menu.inc
            [line] => 348
            [function] => call_user_func_array
            [args] => Array
                (
                    [0] => fb_ajax_event
                    [1] => Array
                        (
                            [0] => session_change
                        )

                )

        )

    [2] => Array
        (
            [file] => /home/cybxxxx/public_html/live/index.php
            [line] => 18
            [function] => menu_execute_active_handler
            [args] => Array
                (
                )

        )

)

I can't make heads or tails of this behavior. I will continue to look around for more info on this problem. Any more insights?