There\'s only thing that server has to do; just check any access token\'s validity.
Clients send to the server user id and access token obtained by FB.getLogin
FB.getLogin
Simply request (HTTP GET):
https://graph.facebook.com/USER_ID/access_token=xxxxxxxxxxxxxxxxx
That's it.