If you want to keep your app structure (using the Preferences to get the access_token without having to do a user login each time), then you will only find out that the access_token is invalid when you actually try and use the API. For example, if you send a GRAPH API request when the token is invalid, the SDK will send something like the following.