Facebook login fails because access token is invalidated after 90 days?

Simon, I am unclear where this “90 days” rule applies..

  • to the user’s Facebook account perhaps, as in “this user hasn’t logged into facebook in 90 days”?

  • to the login method, as in, “this user hasn’t used Facebook to log into this site in 90 days”?