I've only just begun to look at Facebook development but the Oauth part sounds like a cluster-f*ck in the making.

Even though I don't intend to be them, I sympathize with the developers who get it wrong because a hand-off from app-to-web-to-app-to-web on a poorly, inconsistent and changing platform looks hard.