Facebook refresh token about passport-facebook

[mpalmerlee]

Oh, it seems facebook doesn't abide by the oauth2 standard. Am I correct that they don't support refresh tokens?
http://developers.facebook.com/roadmap/offline-access-removal/

I suppose you are just supposed to try an access token and then if it fails request a new one?

[curtislacy]

Last I looked into it, that was the case - they lengthen the expiration time each time the user enters their password, or something along those lines. It's supposed to make it transparent for the developer making an application for Facebook as a platform, but it's a real pain for those of us looking to do offline access.

[mpalmerlee]

Ok, thanks for that. Pretty annoying that they don't use the standard but what can you do other than work around the problem I guess.

Here is another reference:
http://stackoverflow.com/questions/4622171/what-is-the-correct-way-to-refresh-facebook-oauth2-access-token-after-it-expires