There’s only thing that server has to do; just check any access token’s validity. Clients send to the server user id and access token obtained by FB.getLoginStatus. As I expected, there would be a…
https://stackoverflow.com/questions/8605703/how-to-verify-facebook-access-token

