Failed Exchange: Unauthorized (feacft)

[eshlox]

Hello!

I’m trying to get the refresh token using the react-native-auth0. My application has a Native type.

According to the documentation, the authorization code looks like this:

    auth0.webAuth
      .authorize({scope: 'openid email profile offline_access'})
      .then((credentials) => {
         // ...
      })
      .catch((error) => console.log(error));

It opens the login form. I can log in (email & password) but I can’t get the credentials. It always returns [access_denied: Unauthorized]. I see two entries in the application logs, Success Login and Failed Exchange.

Any ideas what can be wrong? The same error occurs even if I remove offline_access from the scope.

Thanks.

[eshlox]

The solution is to enable OIDC Conformant and set the refresh token behavior to Rotating.

[konrad.sopala]

Perfect! Glad you have figured it out and thanks for sharing with the rest of community!