Error: Missing Refresh Token (SPA SDK)

[kyeotic]

I’m trying to enable refresh tokens using the SPA SDK, but running into errors.

I have enabled tokens in the app settings.

I have setup the Auth0Client

new Auth0Client({
  domain: config.auth0.domain,
  clientId: config.auth0.clientId,
  cacheLocation: 'localstorage', // tried with and without this
  useRefreshTokens: true,
  authorizationParams: {
    redirect_uri: `${window.location.protocol}//${window.location.host}`,
    scope: config.auth0.scope, // tried with and without this
  },
})

I have tried with and without “scope” on the client.authorizationParams, as well as with and without “scope” on the getTokenSilently() and loginWithRedirect() calls.

It always results in an error after redirecting back from the Universal login page

Error: Missing Refresh Token (audience: 'MY_AUDIENCE', scope: 'openid profile email offline_access')

[kyeotic]

I figured it out, I was handling login incorrectly.

I had been calling loginWithRedirect() and to login and getTokenSilently() on page load to get the token. This was actually working all by itself, until I added refresh token. Perhaps it shouldn’t have been?

I needed to be calling handleRedirectCallback() to handle login, before calling getTokenSilently(). After adding this, everything is working.

I sure wish handleRedirectCallback() did the work of stripping the auth parameters out of the querystring so that hitting refresh didnt cause a failure.

[jackiegleason]

Can you give an example because I am still having trouble getting it to work

[kyeotic]

Sure thing, this is the repo I am using it in. Feel free to poke around.

If you share your error or config I might be able to point you in the right direction.