Bugsaccess_token failing at high rate
- Status: Fixed
- Priority: Medium
- Updated: July 23, 2012 at 2:51pm
Latest response from Facebook
Sean Quinlan
This should now be resolved. Thanks for your patience.
Status changed to Fixed · July 23, 2012 at 2:51pm
Sean Quinlan
Thanks for the report. We are looking into this.
Status changed to Assigned · Priority changed to Medium · July 17, 2012 at 12:04pm
Starting at 1:20pm Pacific time on 7/11, we noticed a sharp increase in the number of API call failures. When making a call to /{userId}/permissions, we get the following error:
"error": {
"message": "Error validating access token: The session has been invalidated because the user has changed the password.",
"type": "OAuthException",
"code": 190,
"error_subcode": 460
}
This call is made soon after a user installs the application. Since it is highly unlikely that many users are changing their passwords soon after installing an application, and since the error rate jumped at a specific time, we believe there is some error where access_tokens are being invalidated.
This bug sounds like a resurfacing of this bug, which was fixed a few months ago: http://developers.facebook.com/bugs/147244558733196/
"error": {
"message": "Error validating access token: The session has been invalidated because the user has changed the password.",
"type": "OAuthException",
"code": 190,
"error_subcode": 460
}
This call is made soon after a user installs the application. Since it is highly unlikely that many users are changing their passwords soon after installing an application, and since the error rate jumped at a specific time, we believe there is some error where access_tokens are being invalidated.
This bug sounds like a resurfacing of this bug, which was fixed a few months ago: http://developers.facebook.com/bugs/147244558733196/
| Steps to Reproduce: | I have not been able to reproduce this myself since it fails less than 5% of the time; however, I have seen a jump statistically that we are getting this exception about 10 times more than normal. 1. Install schoolFeed. 2. Attempt to make an api call to /me/permissions. 3. Receive an exception "Error validating access token. The session has been invalidated because teh user has changed the password." |
|---|---|
| Expected Behavior: | The access_token should be valid. |
| Actual Behavior: | At a high rate, the access_token is invalidated because the user changed the password. |
| Tool Type: | Access Token Tool |
4 people can reproduce this issue by following these steps
Repro