New refresh_token is optional after renewal

gardner / react-oauth2-pkce

React auth provider that works with AWS cognito PKCE🛡️🔒

49 stars 57 forks source link

New refresh_token is optional after renewal #8

Closed JozefBabala closed 3 years ago

JozefBabala commented 3 years ago

While renewing access token, RFC6749 states that receiving new refresh token is optional. If that's the case, keep an old refresh token (AWS Cognito does not send one).

gardner commented 3 years ago

Nice find!