How to enable issuing of a refresh token

In order to include a refresh token in a response from /auth/token API, you have to configure both Authlete service and its clients.

If not configured, Refresh Token Grant Type (grant_type=refresh_token) is disabled. Issuing of a refresh token for other grant types such as Authorization Code Grant Type (grant_type=authorization_code) is also omitted.

Authlete service settings

Add “REFRESH_TOKEN” to Supported Grant Types. The settings can be found under Authorization tab in Service Owner Console.

Client settings

Requiring such settings for clients is applicable for Authlete 2.1 and later i.e. not applicable for Authlete 2.0 and its previous versions.

Add “REFRESH_TOKEN” to Grant Types. The settings can be found under Authorization tab in Developer Console.