Wojciech Wirzbicki
Reputation: 4382
Is it possible to obtain new refresh token using other refresh token in OAuth2?
Given the scenario:
- user authenticates and obtains refresh and access tokens
- after some time, when refresh token is about to expire user wants to obtain new refresh token using previous refresh token
Is it possible to obtain new refresh token that way?
Upvotes: 0
Views: 49
Answers (1)
rawel
Reputation: 3043
Refresh tokens usually have a very long lifetime. When a new access token is requested using the refresh token OAuth server can send a new refresh token along with the new access token. You can then compare if refresh token has been changed and update your current refresh token with the new token. The new refresh token is usually issued when you have configured sliding expiration for the refresh token and expiration time is approaching.
Upvotes: 1
Related Questions
- How to use refresh token in Oauth2.0?
- is refresh the refresh token and refresh the access token pass the same parameter
- How to refresh token without getting having to go through auth again? OAuth2
- Will an old refresh token still be valid if a new refresh token get issued?
- Why refresh token has to be replaced when used?
- why not obtain a new access token by resending the authorization grant/code instead of sending refresh token?
- oauth access token to get new access token
- Auth0 - get id_token from refresh_token
- OAuth 2 Requesting a new Access Token uses up Refresh Token?
- OAuth 2.0 with refresh token - can I just get new access token for each call?