I ran into an issue while using the Facebook Graph API. I could never get the session to change from null though I was successfully being authenticated. Turns out a call to getSession() should be performed in the callback page. Calling getSession immediately stores the session information from the Request object. From that point, your application has access to the Facebook session data until it times out or until you log out.