Get refresh token with implicit flow where response_type=token

Knowledge Articles
, , ,
1

Problem Statement

Is it possible to get a refresh token with the implicit flow where response_type=token?

Solution

It is not supported to get a refresh token with the implicit flow (response_type=token).

From the standard, RFC 6749: The OAuth 2.0 Authorization Framework, section 4.2 Implicit Grant, in sub-section 4.2.2 mentions that:

“The authorization server MUST NOT issue a refresh token.”