# Did something change

**URL:** <https://community.auth0.com/t/did-something-change/188379>\
**Category:** Get Help\
**Tags:** management-api, free-trial\
**Created:** [June 24, 2025, 9:40pm UTC](https://community.auth0.com/t/did-something-change/188379 "2025-06-24T21:40:59Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![team9](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/team9/32/60385_2.png) [@team9](https://community.auth0.com/u/team9)\
**Post date:** [June 24, 2025, 9:40pm UTC](https://community.auth0.com/t/did-something-change/188379/1 "2025-06-24T21:40:59Z")

</div>

I was able to connect to google and in my full profile i was able to get my refresh token (in my identites). However, now, over the past week, something changed and i am not able to get the refresh token from the full profile. I did not change any code.

---

<div class="post-metadata">

**Author:** ![Misty668Brooks](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/misty668brooks/32/74201_2.png) [@Misty668Brooks](https://community.auth0.com/u/Misty668Brooks)\
**Post date:** [June 25, 2025, 3:08pm UTC](https://community.auth0.com/t/did-something-change/188379/3 "2025-06-25T15:08:46Z")

</div>

Hello!  
If your Google refresh token has suddenly disappeared from your full profile without code changes, the most common reasons are that refresh tokens are typically issued only once per user per client (so subsequent logins won’t return a new one if you already have one), or the existing token has been revoked or expired. Check if access\_type=offline is in your authorization request, and for testing, revoke your app’s access in your Google settings, then re-authenticate using both access\_type=offline and prompt=consent to force a new token. Also, verify your Google Cloud project’s OAuth consent screen status, as “Testing” status limits token validity to 7 days.

---

<div class="post-metadata">

**Author:** ![team9](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/team9/32/60385_2.png) [@team9](https://community.auth0.com/u/team9)\
**Post date:** [June 25, 2025, 4:05pm UTC](https://community.auth0.com/t/did-something-change/188379/4 "2025-06-25T16:05:29Z")

</div>

Yep, we have troubleshot it the way you mentioned. The access\_type is offline. Revoking apps access and re-authenticating using both access\_type=offline and prompt=consent gives me a new access and refresh token from the auth0 user profile identity. However, after 24 hours, the user profile identity doesn’t have the refresh token anymore. In the past 6 months, it wasn’t a problem. Auth0 always had the user profile googles refresh token in the identity. Since the big outage last week, it has been acting up. The problem is auth0 seems to be clearing refresh tokens from there db after 24 hrs? Do I need to start storing these tokens on my end?

---

<div class="post-metadata">

**Author:** ![remus.ivan](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/remus.ivan/32/68771_2.png) [@remus.ivan](https://community.auth0.com/u/remus.ivan)\
**Post date:** [June 25, 2025, 7:47pm UTC](https://community.auth0.com/t/did-something-change/188379/5 "2025-06-25T19:47:22Z")

</div>

Hi @team9,

Welcome to the Auth0 Community and thank you for your post!  
Thanks @Misty668Brooks, for your contribution as well.

What you have mentioned is correct, at outlined in this community post - [Force New Tokens from the Google Social Connection](https://community.auth0.com/t/force-new-tokens-from-the-google-social-connection/144380).

This is however the expected behavior, as storing and refreshing third-party tokens is a feature handled by the new addition of [Token Vault](https://auth0.com/docs/secure/tokens/token-vault), so I would definitely recommend checking this documentation. You can also store the refresh tokens securely on the server side, but enabling this feature makes it a lot easier for you, since Auth0 will manage the process seamlessly. However:

> Token Vault is currently available in Early Access for public cloud tenants. To enable Token Vault, contact your Auth0 representative.

I hope this helps!  
Best regards,  
Remus

---

<div class="post-metadata">

**Author:** ![team9](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/team9/32/60385_2.png) [@team9](https://community.auth0.com/u/team9)\
**Post date:** [June 25, 2025, 8:15pm UTC](https://community.auth0.com/t/did-something-change/188379/6 "2025-06-25T20:15:15Z")

</div>

> [@remus.ivan](#):
>
> Thanks @Misty668Brooks, for your contribution as well.

Thank you remus. So for now, we will save the tokens on our side. This is slightly odd to change the behavior without giving access to token vault. Messes with the experience.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [July 9, 2025, 8:15pm UTC](https://community.auth0.com/t/did-something-change/188379/7 "2025-07-09T20:15:16Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
