CODEWITHSUNDEEP
oauthaccess-tokenrefresh-token
rismoney
rismoney

Reputation: 531

oauth access token to get new access token

Can an access token be used to obtain a new access token, or must you use a refresh token? Currently my oauth provider isn't providing a refresh token so I am trying to understand the capability, as I don't want to repass user/pw to provider after initial bearer token request.

Upvotes: 0

Views: 102

Answers (1)

ishan05
ishan05

Reputation: 41

I don't believe there is a possible way to get an access token without using a non-blacklisted refresh token. This is by design, since we don't want access tokens to be used for something they were not granted for. Ideally you would have saved a refresh token to get a new access token. Of course if the refresh token is expired or explicitly blacklisted by the server, you need to acquire a new one.

I found this helpful article here on it:

https://auth0.com/learn/refresh-tokens/

Upvotes: 1

Related Questions