0👍
I would say that yes you should store it on the database that way you don’t have to make so many requests to facebook. Then what you would do is authenticate the user by their api-token that has been generated by your server. When they have to have their permissions checked you won’t have to hit the facebook api every time you check permissions. You will only have to hit the api when it’s important.
You could also store it as a global variable and check for it that way, but either way I think you would have to store it somewhere to reference it incase the user exits the site because then they would lose their variable and you would have to hit the fb api again.
What you could also do is store it in localStorage, or sessionStorage, but it’s better to have a framework that handles that for you.
like this one!