On the front-end, I\'ve initialised FB and login using:
window.fbAsyncInit = function () {
FB.init({
appId: @facebookAppId, // App ID
var client = new FacebookClient(appID, appSecret);
or
var client = new FacebookClient(accessToken);
You can grab the access token client-side with the javascript SDK and pass it up to the server in a hidden form field (conventional or ajax), or the C# SDK exposes what it finds in the cookie and/or signed request via FacebookWebContext.Current.AccessToken. In the past I have found some timing issues where Facebook did not update the cookie with a new access token/signed request in a timely fashion, which is why I get it in Javascript and post it to the server.