When I get access token from API /oauth/token it returns access token but null refresh token. Using postman I can get refresh token but in our web app refresh token is null. Why is that so?
Are you requesting the
offline_access scope from the application, and has the API you are specifying as the audience been enabled for offline access in its settings?