I'm trying to figure out a core concept in FB that even after reading a lot of FB documentation, couldn't understand. Let's say I'm building an app (that will reside in a tab), in which I want to see the last post of a user. I want to do this approximately one month after the user approved my app, without him using the app again.
I assume I will need to use a long-lived expiration token that will be saved to my DB. A month after I will run a procedure that will use this token and check the user posts.
Is this correct? What about a situation in which the user logged out? The token is no longer valid.. does this mean I will never be able to access user posts unless he will access my app? Isn't this a bit weird (since he already approved my app)?