Closed mattlub closed 6 years ago
From here
So refresh tokens are sent back along with the access token and then when the access token expires the client can use the refresh token along with the client_id and client_secret to get a new access token without having to go through the process of getting a new auth code.
Oath2-node-server module says this is supported but I can't get it to work right now, it's not a massive priority atm tho.
The OAuth branch which got merged #93 did not test for them at all.
from FACN2 research yesterday: