Refesh token is empty with bungie OAuth

[alphaorderly]

Issue

Currently i'm logging into bungie with this config

{
    clientId: API_CLIENT_ID,
    redirectUrl: 'marathoner://redirect/',
    serviceConfiguration: {
        authorizationEndpoint: 'https://www.bungie.net/en/oauth/authorize',
        tokenEndpoint: 'https://www.bungie.net/platform/app/oauth/token/',
    },
    issuer: 'https://www.bungie.net',
};

If i get a response from this

const response: AuthorizeResult = await authorize(authConfig);

Refreshtoken is empty string, not even a null

Here is official document for bungie oAuth

https://github.com/Bungie-net/api/wiki/OAuth-Documentation

and it says it response with this format

{
    "access_token":"2YotnFZFEjr1zCsicMWpAA",
    "token_type":"Bearer",
    "expires_in":3600,
    "refresh_token":"tGzv3JOkF0XG5Qx2TlKWIA",
    "refresh_expires_in": 7776000
    "membership_id":"4352344"
}

I can actually currently get access token, membership id, expire date but not refresh token

How can i fix it?

• current response

Environment

• Your Identity Provider: Bungie
• Platform that you're experiencing the issue on: iOS
• Your react-native Version: e.g. 0.75.4
• Your react-native-app-auth Version: 8.0.0
• Are you using Expo?: 'No'

[carbonrobot]

According to their documentation this is not possible for public OAuth on their platform.

Note: A public client differs from a confidential client in that it is not issued a client_secret (or password) and it will not receive a refresh token in response to a token request.

[alphaorderly]

API Website

They actully provide public oAuth in their platform and i set it to public That's on this website

I think their response format is not like normal one Can i assert/declare types for custom response?

{
    "access_token":"2YotnFZFEjr1zCsicMWpAA",
    "token_type":"Bearer",
    "expires_in":3600,
    "refresh_token":"tGzv3JOkF0XG5Qx2TlKWIA",
    "refresh_expires_in": 7776000
    "membership_id":"4352344"
}

[alphaorderly]

Additionaly, skipcodeexchange does not work at all

[carbonrobot]

To clarify, the documentation states that if you use a public OAuth, like you have configured, then you will not receive a refresh token from Bungie. So this is working as designed by Bungie.

I'm not sure what issue your having with skipcodeexchange, I would need more details to help you there.

[alphaorderly]

Ahh, My bad Close