Is it possible to invalidate a facebook access token?
I need to do this due to the recent deprecation of offline_access.
The problem is that the token cannot be extended beyond 60 days. Even if the user returns to the app (unless I am misunderstanding?)
So, what I want to do is invalidate the token, then immediately log the user back in so that I can get a new access token back, with a new 60 day expiry date. As long as the user comes by once every two months, everything should be OK.
I do not want to log the user out of Facebook so FB.logout is not usable.
Is that possible?
You can send a DELETE request to
/me/permissionswhich should (I think) invalidate the session for the user.However, I don’t really see why you want to do that.
You can just use the server side authentication which ends up with a 60 days token regardless of what token you had before.
So, every time you want 60 more days just authenticate the user using the server side process.