Facebook Graph API rejects newly created access token

Question

Earlier today, the Facebook login flow of our web application stopped working for some users. When we try to fetch the current profile, an error is returned. It claims that

Answer 1

Update:

The issue seems to have just been fixed by Facebook.

---

I filed a bug with Facebook and they are currently (5/3/18) working on a resolution.

There are several workarounds suggested here and in the bug comments. To summarize:

1. Add a new permission that you previously didn't ask for to force re-authorization
2. Catch the error and re-authorize the user manually via auth_type=reauthorize
3. Switch to JS SDK and use client-side login

I'm going for solution #2 as it seems to be the most straight-forward way.