Management API Access Tokens dead end

[josiah_devizia]

I don’t think you can get refresh tokens for the Management API.

For your own defined APIs, you can request the offline_access scope to get refresh tokens.

Since your calls are coming from a backend, the client credentials grant is a good way to get tokens.

Here is a similar question and answer:

Best practice for refreshing token for Auth0 Management API

The recommended practice for your scenario is to obtain the access token to call the Management API by performing a client credentials grant. This grant does not imply or require user credentials, it obtains a token by providing only client application credentials (id and secret). In addition, have in mind that this grant can only be used by confidential client applications that are able to maintain the assigned secret secret. You’re using this from a back-end so that certainly qualifies as a c…