{"action":"closed","issue":{"url":"https://api.github.com/repos/fbsamples/ios-howtos/issues/8","labels_url":"https://api.github.com/repos/fbsamples/ios-howtos/issues/8/labels{/name}","comments_url":"https://api.github.com/repos/fbsamples/ios-howtos/issues/8/comments","events_url":"https://api.github.com/repos/fbsamples/ios-howtos/issues/8/events","html_url":"https://github.com/fbsamples/ios-howtos/issues/8","id":55463875,"number":8,"title":"Testing Login Flow / #6 “Log me out of other devices” not working","user":{"login":"adriantofan","id":750147,"avatar_url":"https://avatars.githubusercontent.com/u/750147?v=3","gravatar_id":"","url":"https://api.github.com/users/adriantofan","html_url":"https://github.com/adriantofan","followers_url":"https://api.github.com/users/adriantofan/followers","following_url":"https://api.github.com/users/adriantofan/following{/other_user}","gists_url":"https://api.github.com/users/adriantofan/gists{/gist_id}","starred_url":"https://api.github.com/users/adriantofan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/adriantofan/subscriptions","organizations_url":"https://api.github.com/users/adriantofan/orgs","repos_url":"https://api.github.com/users/adriantofan/repos","events_url":"https://api.github.com/users/adriantofan/events{/privacy}","received_events_url":"https://api.github.com/users/adriantofan/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-01-26T09:55:57Z","updated_at":"2015-04-14T20:21:54Z","closed_at":"2015-04-14T20:21:54Z","body":"Hello,\r\n\r\nIn your Testing your Login Flow there is a step 6 as follows:\r\n\r\n>6. Someone changes the Facebook password after logging in with Facebook to your app\r\n>In this case, your token will be invalid and you should notify users that their Facebook session has >expired and ask them to log in again.\r\n>\r\n>Change your Facebook password and select “Log me out of other devices”\r\n>Go to your app and tap on the \"Log in with Facebook” button\r\n>Tap OK to accept the read permissions (and OK again to accept write permissions where applicable)\r\n>Go to app settings on Facebook and verify that the granted permissions are there\r\n\r\nSo I did with my app and with FBLoginCustomLoginUISample. Unfortunately this doesn't seem to work. \r\nOnce loged in the app, I go to Facebook, change my password and select “Log me out of other devices”. Next  I restart the app.\r\nThe app detects FBSessionStateCreatedTokenLoaded and makes the call to refresh the token without UI. The call succeeds so the session transitions in to FBSessionStateOpen, which is not correct.\r\n\r\nIs this a bug in the sample code or in the FB single sign in process which fails to invalidate the active sessions? Am I doing something wrong?  \r\n\r\n\r\nThank you"}}