I’ve logged in and got access_token, id_token & refresh_token in the response. When the access_token expires I wish to refresh the tokens AND I wish to get a new refresh token for later use.
All but the last part works. When I refresh I don’t get a new refresh token. I’m using your Java SDK, but I also tried sending http requests manually as described in Refresh Tokens.
Audience & scope seems to be the same in the new access token as in the initial access token.
Any ideas what might be wrong?
Can anybody at least confirm that I’m right in assuming that refreshing the token should return a new refresh token (together with access token)? What else would be the point in having refresh tokens if it can only be used once?
Hey there!
Sorry for such huge delay in response! We’re doing our best in providing you with best developer support experience out there, but sometimes our bandwidth is not enough comparing to the number of incoming questions.
Wanted to reach out to know if you still require further assistance?