Reputation:
I'm reading up on Facebook Access Tokens. I need to generate an app token to inspect an access token I got from a user. This is described here, but isn't that relevant now.
I can write software which generates an app token through the access_token endpoint every time I need to inspect a user's access token. However, that would take some time, and I'd like to avoid it if possible.
I would like to know if these app tokens can expire.
If not, is it a good idea to just store the app token in plaintext in my (server-side) code? That way I can reduce HTTP requests to the API.
Upvotes: 1
Views: 580
Reputation: 19995
Unless you change the secret they do not expire
An App Access Token is signed using your app secret and will not expire; it will be invalidated if you re-key/reset your application secret.
https://developers.facebook.com/docs/opengraph/howtos/publishing-with-app-token/
Upvotes: 2