Facebook Developers
DocumentationSupportBlogAppsLog In
  • Getting Started
  • Core Concepts
  • Advanced Topics
    • Dialogs
    • FQL
    • Internationalization
    • Ads API
    • Credits
    • Chat API
    • Legacy REST API
    • Legacy FBML
    • Legacy FBJS
    • Legacy Javascript SDK
  • SDK Reference
  • Tools
  • Administrative Methods
    • admin.banUsers
    • admin.getAllocation
    • admin.getAppProperties
    • admin.getBannedUsers
    • admin.getRestrictionInfo
    • admin.setAppProperties
    • admin.setRestrictionInfo
    • admin.unbanUsers
    • application.getPublicInfo
    • batch.run
    • data.setCookie
    • fbml.setRefHandle
    • intl.getTranslations
    • intl.uploadNativeStrings
    • links.getStats
    • migrations.getStatuses
    • migrations.setStatus
    • pages.blockFan
  • Login/Auth Methods
    • auth.createToken
    • auth.expireSession
    • auth.getSession
    • auth.promoteSession
    • auth.revokeAuthorization
    • auth.revokeExtendedPermission
  • Data Retrieval Methods
    • comments.get
    • data.getCookies
    • fbml.refreshImgSrc
    • fbml.refreshRefUrl
    • fql.multiquery
    • fql.query
    • friends.areFriends
    • friends.get
    • friends.getAppUsers
    • friends.getLists
    • friends.getMutualFriends
    • groups.get
    • groups.getMembers
    • links.get
    • message.getThreadsInFolder
    • notes.get
    • notifications.get
    • notifications.getList
    • pages.getinfo
    • pages.isAdmin
    • pages.isAppAdded
    • pages.isFan
    • photos.get
    • photos.getAlbums
    • photos.getTags
    • privacy.get
    • profile.getFBML
    • profile.getInfo
    • profile.getInfoOptions
    • status.get
    • stream.get
    • stream.getComments
    • stream.getFilters
    • users.getInfo
    • users.getLoggedInUser
    • users.getStandardinfo
    • users.hasAppPermission
    • users.isAppUser
    • users.isVerified
    • video.getUploadLimits
  • Publishing Methods
    • comments.add
    • comments.remove
    • links.post
    • links.preview
    • liveMessage.send
    • notes.create
    • notes.delete
    • notes.edit
    • notifications.markRead
    • notifications.sendEmail
    • photos.addTag
    • photos.createAlbum
    • photos.upload
    • profile.setFBML
    • profile.setInfo
    • profile.setInfoOptions
    • status.set
    • stream.addComment
    • stream.addLike
    • stream.publish
    • stream.remove
    • stream.removeComment
    • stream.removeLike
    • users.setStatus
    • video.upload
  • Facebook Connect Methods
    • Mobile Methods
      • sms.canSend
      • sms.send
    • Dashboard API Methods
      • dashboard.decrementCount
      • dashboard.getCount
      • dashboard.incrementCount
      • dashboard.multiGetCount
      • dashboard.multiIncrementCount
      • dashboard.multiSetCount
      • dashboard.setCount
    • Events API Methods
      • events.cancel
      • events.create
      • events.edit
      • events.get
      • events.getMembers
      • events.invite
      • events.rsvp
    • Custom Tags API Methods
      • fbml.deleteCustomTags
      • fbml.getCustomTags
      • fbml.registerCustomTags
    • Ads Methods

      auth.getSession

      Advanced Topics › Legacy REST API › auth.getSession
      Please note: We are in the process of deprecating the REST API. We recommend using OAuth 2.0 moving forward. We will not be supporting this method in the Graph API.

      Returns the session key bound to an auth_token, as returned by auth.createToken or in the callback_url. Should be called immediately after the user has logged in or connected accounts with your Facebook Connect site.

      Parameters

      NameTypeDescription
      auth_tokenstring

      The token returned by auth.createToken and passed into login.php

      callbackstring

      Name of a function to call. This is primarily to enable cross-domain JavaScript requests using the <script> tag, also known as JSONP, and works with both the XML and JSON formats. The function will be called with the response passed as the parameter.

      generate_session_secretbool

      Whether to generate a temporary session secret associated with this session. This is for use only with regular sessions where the user hasn't granted your site or application the offline_access extended permission, for applications and sites that want to use a client-side component without exposing the application secret. Note that the application secret is still required for all server-side calls, for security reasons.

      host_urlstring

      The full URL of the page being constructed. By providing the host URL, we can determine what base domain to use when setting cookies on the client's browser.

      Updated over a year ago
      Facebook © 2012 · English (US)
      AboutCareersPlatform PoliciesPrivacy Policy