I’m using the extended access token system to extend oAuth tokens issued by 60 days. This system is working well however one user was reporting that they had to keep resigning in. When debugging his access token these were the results:
Application ID
54321
Application
User ID
12345
Joe Blogs
Issued
1358275114 (21 hours ago)
Expires
Never
Valid True
Origin Web
Scopes email friends_events manage_pages publish_actions rsvp_event user_birthday user_events user_location
Facebook deprecated offline_access in October which was supposedly the only way to generate such a “never expiring” access token. To confirm my question: why am I seeing a never ending access token and one that does not expire in 60 days?
That access token has
manage_pagespermission – if you obtained a 60 day user access token, then used that to retrieve a page access token, the user access token linked to the (infinite) page access token also becomes non-expiringSee Scenario 5 on https://developers.facebook.com/roadmap/offline-access-removal/ for details