Discussions

Refresh token missed on authorization code utilizing

about 1 year ago by Developer Curogram

Hi,

When I'm calling POST /oauth2/token with grant type authorization_code, server responses with access_token and token_type only.

"data": {
  "access_token": "M3YrbS8kF5...uywc",
  "token_type": "bearer"
},

How can I call the refresh token API if I have no refresh token?

Thanks

about 1 year ago by Gabriel

Hi there. I think this might just be how the request was formulated. I believe that when you originally implemented the token exchange you did not request a refresh token but a plain authorization token instead. If refresh is not explicitly requested, the token obtained from the oauth flow will not expire, unless you deauthorize it.

about 1 year ago by Developer Curogram

Hi Gabriel,

Thanks for the quick reply.

The authorize get API has nothing about refresh token requesting, I see The OAuth flow to perform. Must be 'code' (authorization code flow). only.

The redeem API has 2 options for the grant_typefield and in case of authorization_code option I can't find an option allowing me to request refresh_token too.

﻿