How to enable issuing of a refresh token

How to enable issuing of a refresh token

In order to include a refresh token in a response from /auth/token API, you have to configure both Authlete service and its clients.

If not configured, Refresh Token Grant Type (grant_type=refresh_token) is disabled. Issuing of a refresh token for other grant types such as Authorization Code Grant Type (grant_type=authorization_code) is also omitted.

Authlete service settings

Add “REFRESH_TOKEN” to Supported Grant Types. The settings can be found under Authorization tab in Service Owner Console.

how-to-enable-refresh-token-grant-type_1
Supported Grant Types

Client settings

Requiring such settings for clients is applicable for Authlete 2.1 and later i.e. not applicable for Authlete 2.0 and its previous versions.

Add “REFRESH_TOKEN” to Grant Types. The settings can be found under Authorization tab in Developer Console.

how-to-enable-refresh-token-grant-type_2
Grant Types