Home/ Questions/Q 6581435
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-25T16:09:09+00:00

I am using the Graph API for an app that chooses a fan of

  • 0

I am using the Graph API for an app that chooses a “fan of the week” for Facebook pages and announces them automatically to their feed.

For the purpose of announcing the fan on the feed, I store the OAuth access token for the user who installed the app. However sometimes the tokens get invalidated and then the app will fail to post to the feed.

{
   "error" : {
      "message" : "Error validating access token: The session has been invalidated 
      because the user has changed the password.",
      "type" : "OAuthException"
   }
}

Here is another type of error I also get sometimes:

{
    "error": {
        "message": "Error validating access token: Session does not match 
        current stored session. This may be because the user changed the 
        password since the time the session was created or Facebook has changed 
        the session for security reasons.",
        "type": "OAuthException"
    }
}

I already have the “offline_access” for these users, but the tokens are still becoming invalid sometimes. Is there anything else I can do to prevent this from happening, besides sending the user an email asking them to visit the app page again so that I could get a new OAuth token?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    There’s no way around this that doesn’t require user intervention of some kind. If it’s an app or page users are unlikely to visit frequently, then sending that e-mail sounds like a good idea. When users visit the page or app you can use the FB Javascript SDK, which automatically refreshes sessions, and subscribe to the FB.Event.subscribe(‘auth.sessionChange’) with a handler that updates the token in your database.

    • 0