Facebook Setup

Create a Meta developer app

1. Go to developers.facebook.com, log in.
2. Top right, My Apps, then Create app.
3. Use case: pick Other, then Next. ("Other" exposes the widest product menu, including Pages permissions.)
4. App type: pick Business, then Next. Business type is required for pages_manage_posts.
5. Fill in app name (something like ArtDrop Personal), contact email, optional Business Portfolio, Create app, and pass the security check.

Note your App ID and App Secret

1. Left sidebar, App settings, Basic.
2. Copy the App ID (visible at the top).
3. Click Show next to App Secret, reveal it, copy it somewhere safe (not in a git repo).
4. Add a Privacy Policy URL and an App Domain if prompted. These are required for anything past development mode.

You'll use the App ID and Secret in Step 5 to mint a long-lived token. Keep them handy.

Generate a short-lived User Token

1. Open developers.facebook.com/tools/explorer.
2. Top right: Meta App dropdown, select the app from Step 1.
3. User or Page dropdown, select User Token.
4. Click Add a Permission and check each of these three:
   • pages_show_list
   • pages_read_engagement
   • pages_manage_posts
5. Click Generate Access Token. In the popup, log in, Continue as [you], pick which Pages the app can access, Continue.
6. Copy the token that fills the token field. It's valid for about 1 hour, so do Steps 4 through 6 in the same sitting.

Call /me/accounts in the Explorer

With the User Token selected, replace the Explorer's default query with:

GET me/accounts

Click Submit. You get back an array of Pages you admin. Each one has id, name, and access_token. Find the row for the Page you want ArtDrop to post to.

The access_token on this row is technically a Page Access Token, but it inherits the short-lived expiry from your User Token. The next step makes it permanent.

Trade the short User Token for a long one (60 days)

Open a new tab and paste this URL, filling in your APP_ID, APP_SECRET, and the short User token from Step 3:

https://graph.facebook.com/v23.0/oauth/access_token
    ?grant_type=fb_exchange_token
    &client_id={APP_ID}
    &client_secret={APP_SECRET}
    &fb_exchange_token={SHORT_USER_TOKEN}

Response:

{ "access_token": "EAAG...long...", "token_type": "bearer", "expires_in": 5183944 }

Copy the new access_token. That's your long-lived User Token.

Re-fetch /me/accounts with the long-lived token

Back in the Graph API Explorer, paste the long-lived User Token into the token field and run GET me/accounts again.

This time, the access_token that comes back for each Page is a non-expiring Page Access Token. That's the one ArtDrop wants.

Copy two fields off the Page row:

• id, your Page ID.
• access_token, your Page Access Token.

This is the whole trick. A Page token derived from a short-lived User token expires in an hour. A Page token derived from a long-lived User token never expires (as long as you stay admin and don't change your Facebook password).

Double-check the Page ID another way

If you want to confirm the Page ID another way:

• Go to your Page on Facebook, open the About tab.
• Scroll to the bottom, open Page transparency. The Page ID is listed there.

Or in Meta Business Suite: Settings, Page details.

Paste both values into ArtDrop

Back in ArtDrop's Social page, Facebook section:

• Page Access Token: the never-expiring token from Step 6.
• Page ID: the numeric ID from Step 6 (or Step 7).

Hit Save. ArtDrop tests the token by calling /{page-id}?fields=id,name and will flag any mismatch immediately.