jaredhanson / jaredhanson/oauth2orize

How to send refresh token next to access token after authorization?

Open
#219 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
3.5k
Forks
472
PR merge metrics
No merged PRs in 30d

Description

Hey,

I am working on an implementation which requires that after the user approved a client, the client needs to receive the refresh_token as well next to the access_token. I already implemented the refresh_token on the token route, meaning that retrieving a new access_token with a given refresh_token works. However, tokne.js doesn't seem to provide an input for a refresh_token.

What I expected is that one calls done(null, accessToken, refreshToken) and both get sent. How can this be implemented?

Contributor guide

Open the contributing guide

Research direction

Start with the token route and the tokne.js input mentioned in the issue, then trace how the access_token is returned after client approval. Define how a refresh_token should be accepted and returned alongside it, and verify that both tokens are available to the client after authorization.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
api, authentication
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.