Hi everybody,

I've got a piece of code that logs into Facebook, gets a session, sets status_update and offline_access permission if they are not set, and gets a new session with the newly set permissions. This code used to work fine but now I'm getting error 100 "One of the parameters specified was missing or invalid" as a response to the second call to get session and I can't figure out why. Here's the sequence in detail:

CREATE TOKEN

restserver.php?method=auth.createToken&api_key=[our key]&v=1.0&format=JSON&sig=[sig created with our secret]

response: new token

LOGIN

m.facebook.com/login.php?api_key=[our key]&v=1.0&auth_token=[token created above]

login screen loads and user successfully logs in with their username/password.

GET SESSION

restserver.php?method=auth.getSession&api_key=[our key]&v=1.0&format=JSON&auth_token=token created above>&sig=[sig created with our secret]

response: session key with expiration date and a secret

CHECK/AUTHORIZE PERMISSIONS

restserver.php?method=users.hasAppPermission&api_key=[our key]&v=1.0&format=JSON&ext_perm=status_update&call_id=[proper id]&session_key=[key returned above]&sig=[sig created with secret returned for get session]

response: 0

m.facebook.com/authorize.php?api_key=[our key]&v=1.0&ext_perm=status_update

authorization screen loads and user authorizes

Same steps for status_update

CREATE NEW TOKEN

Same steps as done to create the first token

LOGIN

m.facebook.com/login.php?api_key=[our key]&v=1.0&auth_token=[new token]

user is already logged in, redirected to their homepage

GET NEW SESSION

restserver.php?method=auth.getSession&api_key=[our key]&format=JSON&auth_token=[new token]&sig=[sig created with our secret]

response: error 100 - missing or invalid parameter. Of course it doesn't tell me which one.

Anybody have any ideas what I'm doing wrong here? I tried skipping the second login and going right to creating the new session and that didn't work. The only thing that seems to work is logging out the user after they've authorized the permissions and having them log back in again. I'd like to avoid this if possible. Can you have two outstanding sessions at one time?

This code used to work but I'm thinking maybe something changed on Facebook's end that I'm not aware of.

Thanks,

kris