What you see is not that the SDK does not clear the token information - the SDK really cleared the token. The information that allows you to see the message "you are already logged in ..." belongs to Facebook. In the settings of the user application, they have an authorization parameter from your application that you asked for when they first logged in.
To revoke permissions from your application, you need to touch the Graph API. FB, in the "Delete" section https://developers.facebook.com/docs/reference/api/user/
You can revoke the authorization of the application or revoke the specific extended permissions on behalf of the user by issuing an HTTP DELETE request for PROFILE_ID / permission with the user access_token for this application.
I assume that you know how to send Graph API requests using the SDK, let me know if not.
source share