CSRF state token does not match one provided FB PHP SDK 3.1.1 Oauth 2.0

Question

My server logs show a \"CSRF state token does not match one provided\" error which seems to happen for almost every user. However, the users are created and/or authenticated

Answer 1

I had the same issue. It´s easy. Don´t call

$fbLoginUrl = $facebook->getLoginUrl(...);

before

$fbUser = $facebook->getUser();

otherwise you will get "CSRF state token does not match one provided" error.