Itqualityassurance
- Does access token have user info?
- What can you do with a Facebook access token?
- Can access token be decoded?
Does access token have user info?
Access tokens do not convey user identity or any other information about the user to the OAuth client. Access tokens should only be used to make requests to the resource server.
What can you do with a Facebook access token?
Tokens are Portable
Otherwise, once you have an access token you can use it to make calls from a mobile client, a web browser, or from your server to Facebook's servers. If a token is obtained on a client, you can ship that token down to your server and use it in server-to-server calls.
Can access token be decoded?
Decoding. Verifying the access token can be done by using the same JWT library.
