Skip to content

Latest commit

 

History

History
23 lines (18 loc) · 869 Bytes

refresh-token-grant.md

File metadata and controls

23 lines (18 loc) · 869 Bytes
Raw

Refresh Token Grant

This protocol is part of OAuth 2.0 (defined in OAuth 2.0 RFC 6749, section 1.5). The refresh token grant is used by clients to exchange a refresh token for an access token when the access token has expired.

Principle of function

---
title: Refresh Token Grant
---
sequenceDiagram
  App->>Identity Provider: Request new access token with refresh token (1)
  activate App
  Note right of Identity Provider: Validate refresh token
  Identity Provider->>App: Access token and optional refresh token (1)
  deactivate App

  App->>Your API: Request protected data with refreshed access token (2)
Loading
  1. signinSilent() must be used to start the flow.
  2. The refreshed access token is now accessible via getUser()?.access_token and inserted into the requests to your protected API.