Facebook to require refreshing auth tokens every 30 days

[mdz]

We'll need to implement support for this in Locker.

http://developers.facebook.com/blog/post/633/

https://developers.facebook.com/docs/offline-access-deprecation/

[merc3po]

We'll need to do this before we add a ton more people since it applies to new users.

[quartzjer]

I'm taking this off of USEIT as the cutover is May 1st, and it's confusing enough in their docs to make it a large unknown how this works yet. I think it means that new tokens we get after that date will be valid for 60 (not sure!) days, and expire unless the person comes back and we use their browser (?! not sure!) to exchange the token for a new one.

AFAICT the final word is if someone doesn't interact in whatever the max expiration is and the token expires, we're effectively disconnected. We may need to monitor the time and an email prod to come back specifically for this.