I think if you try to login 3 or 4 times, then facebook very helpfully gives you an "account alert" on their website and lets you verify that you were actually trying to login and then it should work.
I'm not sure about the better way to do this. Two factor auth still trips up even many of google's login mechanisms that don't even involve oauth.