blocks|key|913556|text|离线，不向facebook发送任何东西-我不这么认为。最简单的方法可能是向以下地址发送请求：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|913557|https://graph.facebook.com/me?access_token=...|code-block|syntax|javascript|913558|Facebook也支持订阅real-time更新，但我不确定如何将其应用于这种情况。|offset|length|913559|entityMap|0|LINK|mutability|MUTABLE|url|http://developers.facebook.com/docs/api/realtime^0|0|0|D|9|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|T|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|U|8|@]|9|@$I|V|J|W|1|X]]|A|$]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]]|L|$M|$5|N|O|P|A|$Q|R]]]]

Offline, without sending anything to facebook - I don't think so. The easiest way is probably to send a request to: 

<pre><code>https://graph.facebook.com/me?access_token=...
</code></pre>

Facebook also supports subscriptions for <a href="http://developers.facebook.com/docs/api/realtime">real-time</a> updates, but I am not sure how to apply them to this situation.

blocks|key|1128508|text|实时更新将允许您解决此问题，但它将相当复杂。基本上，你可以订阅更新，这些更新将告诉你:+1)用户是否删除了应用程序；2)用户是否删除了权限。您可以使用它来存储faceboook用户的当前权限。这样，如果用户删除了您的应用程序，您将知道访问令牌已过期。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1128509|实时更新实际上是facebook推荐的权限处理方式。许多应用程序在每次加载页面时都会进行api调用，以检查权限。这往往是缓慢和不可靠的。|1128510|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

The real time updates would allow you to solve this problem, but it would be pretty complicated. Basically, you can subscribe to updates that will tell you 1) if the user removed the app or 2) if the user removed permissions. You could use this to store the current permissions of the faceboook user. This way, if the user removed your app you would know that the access token is expired.

Real time updates is actually facebooks recommended way of handling permissions. Many apps make api calls every time a page is loaded to check for permissions. This tends to be slow and unreliable.

blocks|key|913766|text|Otto对facebook帖子的回答似乎是对这个问题的官方回应，但它直接使用PHP而不是SDK，也使用JS而不是PHP来解决问题。如果您使用PHP检查有效会话，则通常需要PHP方法来确保有效会话才能继续。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|913767|下面的代码使用图形API检查me对象。如果抛出一个异常，它会销毁*当前的Facebook会话。|913768|try{
++++$facebook->api('/me');
}
catch(+FacebookApiException+$e+){
++++$facebook->destroySession();
}|code-block|syntax|javascript|913769|这迫使后来的图形调用实例化一个新的Facebook会话。这至少给了你访问公共数据的权限，这样你就可以渲染不需要FB用户权限的页面：|913770|$facebook->api('/userName');|913771|要重新获得用户权限访问权限，用户需要登录到您的应用程序(这与登录到Facebook本身不同)。您可以使用JS或PHP来完成此操作：|913772|$facebook->getLoginUrl();|913773|*注意destroySession()调用还没有出现在PHP+SDK的标记版本中。使用主分支或对其进行修补。|913774|entityMap^0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|V|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|W|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|X|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|Y|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|Z|8|@]|9|@]|A|$]]|$1|O|3|P|5|F|7|10|8|@]|9|@]|A|$G|H]]|$1|Q|3|R|5|6|7|11|8|@]|9|@]|A|$]]|$1|S|3|-4|5|6|7|12|8|@]|9|@]|A|$]]]|T|$]]

Otto's answer of the facebook post seems to be the official response on this question, however it uses straight PHP instead of the SDK and also uses JS to resolve the issue instead of PHP. If you are using PHP to check for a valid session you often need a PHP method of ensuring a valid session in order to continue.

The following code checks for the me object with the graph API. If an exception is thrown it destroys* the current Facebook session.

<pre><code>try{
 $facebook-&gt;api('/me');
}
catch( FacebookApiException $e ){
 $facebook-&gt;destroySession();
}
</code></pre>

This forces later graph calls to instantiate a new Facebook session. This at least gives you access to public data so that you can render pages do not require FB user permissions:

<pre><code>$facebook-&gt;api('/userName');
</code></pre>

To reobtain user permission access the user will need to login to your app (this is distinct from being logged into Facebook itself). You can do this with JS or with PHP:

<pre><code>$facebook-&gt;getLoginUrl();
</code></pre>

*Note the destroySession() call is not in a tagged release of the PHP SDK yet. Use the master branch or patch it in.

blocks|key|913825|text|如果你想知道令牌过期时间，你可以使用appid和token传递一个开放的图形url，如下所示。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|913826|https://graph.facebook.com/oauth/access_token_info?client_id=APPID&access_token=xxxxxxxxx|code-block|syntax|javascript|913827|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

If you want to know the token expiry time you can pass a open graph url using appid and token as below it will work .

<pre><code>https://graph.facebook.com/oauth/access_token_info?client_id=APPID&amp;access_token=xxxxxxxxx
</code></pre>

blocks|key|1128728|text|您可以使用令牌调试服务检查令牌，请查看此处|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1128729|https://graph.facebook.com/debug_token?input_token=INPUT_TOKEN&access_token=ACCESS_TOKEN|offset|length|1128730|https://developers.facebook.com/docs/howtos/login/debugging-access-tokens/|1128731|entityMap|0|LINK|mutability|MUTABLE|url|1^0|0|0|2G|0|0|0|22|1|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Q|8|@]|9|@$D|R|E|S|1|T]]|A|$]]|$1|F|3|G|5|6|7|U|8|@]|9|@$D|V|E|W|1|X]]|A|$]]|$1|H|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|C]]|O|$5|K|L|M|A|$N|G]]]]

You can check the token using the token debug service , take a look here

<a href="https://graph.facebook.com/debug_token?input_token=INPUT_TOKEN&amp;access_token=ACCESS_TOKEN">https://graph.facebook.com/debug_token?input_token=INPUT_TOKEN&amp;access_token=ACCESS_TOKEN</a>

<a href="https://developers.facebook.com/docs/howtos/login/debugging-access-tokens/">https://developers.facebook.com/docs/howtos/login/debugging-access-tokens/</a>

blocks|key|913898|text|++++++++//When+user+access+token+expires+user+must+be+logged+in+and+renew+the+access+token+him+self.it+is+a+Facebook+policy+
++++++++//you+can+overcome+this+by+sending+email+to+users+who+have+expired+access+token.
++++++++//create+a+table+of+successful+sending+to+monitor+sending+process
++++++++//if+any+failure+happened+with+the+user+an+email+is+sent+to+him+to+ask+him+to+activate+there+account+again.with+a+link+to+your+subscription+page.
++++++++//and+here+is+the+code+should+be+written+on+that+page.+
+++++++++$app_id+=+"YOUR_APP_ID";
+++++++++$app_secret+=+"YOUR_APP_SECRET";+
+++++++++$my_url+=+"YOUR_POST_LOGIN_URL";

++++++++//+known+valid+access+token+stored+in+a+database+
++++++++$access_token+=+"YOUR_STORED_ACCESS_TOKEN";

++++++++$code+=+$_REQUEST["code"];

+++++++//+If+we+get+a+code,+it+means+that+we+have+re-authed+the+user+
+++++++//and+can+get+a+valid+access_token.+
+++++++if+(isset($code))+{
+++++++++$token_url="https://graph.facebook.com/oauth/access_token?client_id="
+++++++++++.+$app_id+.+"&redirect_uri="+.+urlencode($my_url)+
+++++++++++.+"&client_secret="+.+$app_secret+
+++++++++++.+"&code="+.+$code+.+"&display=popup";
+++++++++$response+=+file_get_contents($token_url);
+++++++++$params+=+null;
+++++++++parse_str($response,+$params);
+++++++++$access_token+=+$params['access_token'];
+++++++}


+++++++//+Attempt+to+query+the+graph:
+++++++$graph_url+=+"https://graph.facebook.com/me?"
+++++++++.+"access_token="+.+$access_token;
+++++++$response+=+curl_get_file_contents($graph_url);
+++++++$decoded_response+=+json_decode($response);

+++++++//Check+for+errors+
+++++++if+($decoded_response->error)+{
+++++++//+check+to+see+if+this+is+an+oAuth+error:
+++++++++if+($decoded_response->error->type==+"OAuthException")+{
+++++++++++//+Retrieving+a+valid+access+token.+
+++++++++++$dialog_url=+"https://www.facebook.com/dialog/oauth?"
+++++++++++++.+"client_id="+.+$app_id+
+++++++++++++.+"&redirect_uri="+.+urlencode($my_url);
+++++++++++echo("<script>+top.location.href='"+.+$dialog_url+
++++++++++.+"'</script>");
++++++++}
++++++++else+{
++++++++++echo+"other+error+has+happened";
++++++++}
++++++}+
++++++else+{
++++++//+success
++++++++echo("success"+.+$decoded_response->name);
++++++++echo($access_token);
++++++}

++++++//+note+this+wrapper+function+exists+in+order+to+circumvent+PHP's+
++++++//strict+obeying+of+HTTP+error+codes.++In+this+case,+Facebook+
++++++//returns+error+code+400+which+PHP+obeys+and+wipes+out+
++++++//the+response.
++++++function+curl_get_file_contents($URL)+{
++++++++$c+=+curl_init();
++++++++curl_setopt($c,+CURLOPT_RETURNTRANSFER,+1);
++++++++curl_setopt($c,+CURLOPT_URL,+$URL);
++++++++$contents+=+curl_exec($c);
++++++++$err++=+curl_getinfo($c,CURLINFO_HTTP_CODE);
++++++++curl_close($c);
++++++++if+($contents)+return+$contents;
++++++++else+return+FALSE;
++++++}|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|913899|unstyled|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$B|C]]|$1|D|3|-4|5|E|7|H|8|@]|9|@]|A|$]]]|F|$]]

<pre><code> //When user access token expires user must be logged in and renew the access token him self.it is a Facebook policy 
 //you can overcome this by sending email to users who have expired access token.
 //create a table of successful sending to monitor sending process
 //if any failure happened with the user an email is sent to him to ask him to activate there account again.with a link to your subscription page.
 //and here is the code should be written on that page. 
 $app_id = "YOUR_APP_ID";
 $app_secret = "YOUR_APP_SECRET"; 
 $my_url = "YOUR_POST_LOGIN_URL";

 // known valid access token stored in a database 
 $access_token = "YOUR_STORED_ACCESS_TOKEN";

 $code = $_REQUEST["code"];

 // If we get a code, it means that we have re-authed the user 
 //and can get a valid access_token. 
 if (isset($code)) {
 $token_url="https://graph.facebook.com/oauth/access_token?client_id="
 . $app_id . "&amp;redirect_uri=" . urlencode($my_url) 
 . "&amp;client_secret=" . $app_secret 
 . "&amp;code=" . $code . "&amp;display=popup";
 $response = file_get_contents($token_url);
 $params = null;
 parse_str($response, $params);
 $access_token = $params['access_token'];
 }


 // Attempt to query the graph:
 $graph_url = "https://graph.facebook.com/me?"
 . "access_token=" . $access_token;
 $response = curl_get_file_contents($graph_url);
 $decoded_response = json_decode($response);

 //Check for errors 
 if ($decoded_response-&gt;error) {
 // check to see if this is an oAuth error:
 if ($decoded_response-&gt;error-&gt;type== "OAuthException") {
 // Retrieving a valid access token. 
 $dialog_url= "https://www.facebook.com/dialog/oauth?"
 . "client_id=" . $app_id 
 . "&amp;redirect_uri=" . urlencode($my_url);
 echo("&lt;script&gt; top.location.href='" . $dialog_url 
 . "'&lt;/script&gt;");
 }
 else {
 echo "other error has happened";
 }
 } 
 else {
 // success
 echo("success" . $decoded_response-&gt;name);
 echo($access_token);
 }

 // note this wrapper function exists in order to circumvent PHP's 
 //strict obeying of HTTP error codes. In this case, Facebook 
 //returns error code 400 which PHP obeys and wipes out 
 //the response.
 function curl_get_file_contents($URL) {
 $c = curl_init();
 curl_setopt($c, CURLOPT_RETURNTRANSFER, 1);
 curl_setopt($c, CURLOPT_URL, $URL);
 $contents = curl_exec($c);
 $err = curl_getinfo($c,CURLINFO_HTTP_CODE);
 curl_close($c);
 if ($contents) return $contents;
 else return FALSE;
 }
</code></pre>

blocks|key|1128790|text|离线-不可能|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1128791|询问用户是否已授予权限：|1128792|https://graph.facebook.com/{facebook-id}/permissions?access_token={access-token}|code-block|syntax|javascript|1128793|如果访问令牌无效，则会显示错误：|1128794|{++
+++error:{++
++++++message:"The+access+token+could+not+be+decrypted",
++++++type:"OAuthException",
++++++code:190
+++}
}|1128795|否则，它将给出用户已授予的权限列表：|1128796|data:[++
+++{++
++++++installed:1,
++++++......+permission+list.........+
++++++bookmarked:1
+++}
]|1128797|entityMap^0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|T|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|U|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|V|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|W|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|X|8|@]|9|@]|A|$]]|$1|O|3|P|5|F|7|Y|8|@]|9|@]|A|$G|H]]|$1|Q|3|-4|5|6|7|Z|8|@]|9|@]|A|$]]]|R|$]]

Offline - it is not possible

Ask that user has given permission or not:

<pre><code>https://graph.facebook.com/{facebook-id}/permissions?access_token={access-token}
</code></pre>

If access token is invalid then it will give error:

<pre><code>{ 
 error:{ 
 message:"The access token could not be decrypted",
 type:"OAuthException",
 code:190
 }
}
</code></pre>

Otherwise it will give list of permission that user has given:

<pre><code>data:[ 
 { 
 installed:1,
 ...... permission list......... 
 bookmarked:1
 }
]
</code></pre>

blocks|key|1128831|text|更新它，因为自操作以来事情已经发生了变化：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1128832|您可以在此处调试访问令牌：https://developers.facebook.com/tools/debug/accesstoken?version=v2.5&q={access_token}|offset|length|1128833|entityMap|0|LINK|mutability|MUTABLE|url|https://developers.facebook.com/tools/debug/accesstoken?version=v2.5&q=^0|0|D|1Z|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@$D|P|E|Q|1|R]]|A|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|A|$]]]|G|$H|$5|I|J|K|A|$L|M]]]]

Updating this as things have changed since OP:

You can debug access tokens here: <a href="https://developers.facebook.com/tools/debug/accesstoken?version=v2.5&amp;q=" rel="nofollow">https://developers.facebook.com/tools/debug/accesstoken?version=v2.5&amp;q=</a>{access_token}

My site utilizes lifetime access tokens (<code>offline_access</code>). However, if the user changes his/her password, the access token gets reset. Is there a method to check if the current access token is valid before making calls to the Graph API? Thanks for your time.

Is there a way to check if Facebook access token is still valid?

我的网站使用终生访问令牌(offline_access)。但是，如果用户更改了他/她的密码，访问令牌将被重置。有没有一种方法可以在调用Graph API之前检查当前访问令牌是否有效？耽误您时间，实在对不起。

问有没有办法检查Facebook访问令牌是否仍然有效？
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问有没有办法检查Facebook访问令牌是否仍然有效？EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问有没有办法检查Facebook访问令牌是否仍然有效？
EN