CODEWITHSUNDEEP
facebookfacebook-graph-api
stipe108
stipe108

Reputation: 1650

Does Facebook reuse/recycle access tokens after they expire?

Assume a user's FB access_token has expired for some reason (expiration time is past, user changed password, user removed app from their dashboard, etc). Am I guaranteed that this access_token will never be given out to any user again?

Upvotes: 0

Views: 128

Answers (1)

cpilko
cpilko

Reputation: 11852

Access tokens can be decoded by the Facebook debugger. This hints that they are a hash of some data, including the user, the scope granted, the requesting app and the expiration time.

With this protocol, there should be no duplication of access tokens. However, that does not mean that Facebook won't change their protocol in the future, which could result in a duplicate. This seems pretty unlikely.

Upvotes: 1

Related Questions