3 ms·
>Most access tokens expire in two hours, but some tokens work offline and remain valid until the user changes the password, Doshi said. FB users can just go in
by mpobrien 15y ago
>Most access tokens expire in two hours, but some tokens work offline and remain valid until the user changes the password, Doshi said.
FB users can just go into their authenticated applications list and revoke access tokens on a per-application basis. Changing passwords shouldn't be necessary - that's the whole point of access tokens.
- ceejayoz 15y agoNot only is it unnecessary, it won't do anything. One of the big points of access tokens is that they survive password changes, so a user can change their credentials and not have to reauthorize a few dozen apps.