Facebook access token: server-side vs client-side flows

Posted by alexey on Stack Overflow See other posts from Stack Overflow or by alexey
Published on 2012-01-30T17:21:19Z Indexed on 2014/05/30 3:26 UTC
Read the original article Hit count: 165

Facebook docs:

Facebook Platform supports two different OAuth 2.0 flows for user login: server-side (known as the authentication code flow in the specification) and client-side (known as the implicit flow). The server-side flow is used whenever you need to call the Graph API from your web server. The client-side flow is used when you need to make calls to the Graph API from a client, such as JavaScript running in a Web browser or from a native mobile or desktop app.

What is the difference between access tokens taken by these flows? It seems like they length differ.

Can we use server-side flow token on a client? And otherwise, can we use client-side flow token on a server?

© Stack Overflow or respective owner

Related posts about facebook

Related posts about facebook-graph-api