FACEBOOK SESSION EXPIRED ON IPHONE CODE
FACEBOOK SESSION EXPIRED ON IPHONE PASSWORD
FACEBOOK SESSION EXPIRED ON IPHONE PLUS

Facebook Auto LoginĪuto-login has made most of our lives easier.

Hence, Facebook may log you out when it’s trying to solve an issue or conducting maintenance at the back end. With large scale operations, errors and bugs are quite frequent. With over 2.4 billion active users Facebook is a virtual continent on its own. This allows malicious hackers to breach into your Facebook account.

FACEBOOK SESSION EXPIRED ON IPHONE PASSWORD

Moreover, your account id and password may be compromised due to a recent cyber attack or maybe you have a weak password that is easy to crack. Maybe you tried to check up on your account from a friend’s computer or phone and clicked on the save password notification or forgot to log out. This may happen if someone gets access to your account from a previously logged-in device. Second, we will set it up to use later: // set up cancel token from axios to be able to cancel network requestsĬonst cancelSource = CancelToken.source() // more info: Ĭonst instance = ApiSauce.If you are already logged in and someone tries to do the same with your account from a different IP, Facebook may take precautions and log you out from all your devices. This CancelToken gives us the opportunity to block these network requests, just in case.įirst, we will set up the CancelToken, which we will need to import from apisauce (or axios), in the Api.js file under /services. We can add this protection by adding a request transform, which will double check if the expiry from the session helper has been expired or is null ( null could mean that a user was already logged out, for example when there were multiple tabs of the SPA opened and one of them triggered the timeout after enough inactivity) in combination with the CancelToken of axios. Our final step is to block network requests when the expiry from our storage has passed. Restarting and retrying later is our way of making sure all tabs are, eventually, on Microsoft's login page. This can happen when an other tab has reset the expiry, but obviously can't reset the timer in the original tab, causing the original tab to be in a 'limbo' state: its user is logged out but the application is still shown. If the token is not expired or is null (while it actually should not be null, and expired) at the moment the timeout is triggered, we restart it to try again later (granted, this isn't handled that well but for a first version it'll do and we'll later see why). You could also do these things later in some componentDidMount function in your app, but then it's possible that it ('it' being the lack of an expiry value in the storage before rendering the application) trips up logic protecting our authenticated backend calls. In practice, this happens when a user was logged in before and closed the tab before the automatic logout function was called.įollowing on that, if a user is logged in and we are ready to render the authenticated part of our application, set the expiry value in the storage and start the timeout to automatically logout. When you're ready, follow these steps: Initialize Session-HelperĪdd a session config file for the session helper:īy checking if our expiry value has expired we can logout a previously logged in user, effectively blocking automatic logins. I won't go into too much detail as I think its readme is self-explanatory enough.

FACEBOOK SESSION EXPIRED ON IPHONE CODE

I have written a npm package called Session-Helper containing a bit of code to help us out with that.

FACEBOOK SESSION EXPIRED ON IPHONE PLUS

To achieve this we will save an expiry time value in the local- or session-storage and with each network request we will check if that time hasn't expired yet, plus we'll add (and reset) a timer function which will effectively log out the user automatically after 30 minutes of inactivity. On to part 2: we will add an automatic logout after 30 minutes (configurable), but we will keep the session valid and postpone the expiry time as long as the user is actively doing network requests in those 30 minutes. You can use it to see which code of part 1 has been refactored with ApiSauce. To make the switch easier I have made an “in between tutorial”-branch called with-ApiSauce which you can find here. Essentially, it will make things easier and faster to achieve for us. It's not that different than axios since it is, and I quote, “a low-fat wrapper for the amazing axios http client library”. Or maybe because you want to add some more functionality which isn't available within the Azure configuration.īefore we start, I want to let you know that instead of axios we will be using apisauce. And maybe because you don't have access to the Azure configuration. In this second part, our goal will be to take control of the session timeouts, without having to change configuration settings on the Azure platform. This is the second part of the tutorial regarding React SPA and Authentication and Session Management.

Facebook session expired on iphone