title: Do I need to worry about refresh tokens using Facebook external login in Web API?
body: <p>I have an ASP.NET Web API project, and recently added both local and external OAuth login (using <a href="https://stackoverflow.com/questions/21065648/asp-net-web-api-2-how-to-login-with-external-authentication-services">this question</a> as a base). Now, the login is working, but what I worry about now is the expiration date of the tokens. If I understand correctly, Facebook's tokens expire after <a href="https://developers.facebook.com/docs/facebook-login/access-tokens/expiration-and-extension" rel="nofollow noreferrer">60 days</a>, so that means that after two months I should be refreshing the tokens.</p>
  
  <p>But, now my question is, does ASP.NET Web API handle this refresh process for me? Or do I have to add my own logic? I ask because the tutorials are not clear about what to do. They just tell you to enable the Facebook auth and that's it.</p>