Auth0 Home Blog Docs

Non interactive client / Resource Owner Password / Refresh Token

refresh-tokens
resource-owner-passw
non-interactive

#1

I am expecting a refresh_token for the following request. The refresh_token is not in the response. What am I doing wrong?

REQUEST:

{
	"grant_type": "http://auth0.com/oauth/grant-type/password-realm",
	"username": "blah@blah.com",
	"password": "pwd",
	"audience": "https://mayapi.whatever.com/",
	"client_id": "yfyfdsfsdk...",
	"client_secret": "hjklhjkl...",
	"realm": "Username-Password-Authentication",
	"device": "client-mach",
	"scope": "openid offline_access profile"
}

RESPONSE:

{
	"access_token": "eyJ0eXAiOiJKV1QiLCJhbG ...",
	"id_token": "eyJ0eXAiOiJKV1QiLCJhbGciOi ...",
	"scope": "openid profile",
	"expires_in": 86400,
	"token_type": "Bearer"
}

#2

Solution:
Make sure the API option “Allow Offline Access” is selected.


#3