jaredhanson / jaredhanson/oauth2orize
How to send refresh token next to access token after authorization?
- Dominant language
- JavaScript
- Stars
- 3.5k
- Forks
- 472
- PR merge metrics
- No merged PRs in 30d
Description
Hey,
I am working on an implementation which requires that after the user approved a client, the client needs to receive the refresh_token as well next to the access_token. I already implemented the refresh_token on the token route, meaning that retrieving a new access_token with a given refresh_token works. However, tokne.js doesn't seem to provide an input for a refresh_token.
What I expected is that one calls done(null, accessToken, refreshToken) and both get sent. How can this be implemented?
Contributor guide
Research direction
Start with the token route and the tokne.js input mentioned in the issue, then trace how the access_token is returned after client approval. Define how a refresh_token should be accepted and returned alongside it, and verify that both tokens are available to the client after authorization.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- api, authentication
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100