Refreshing Github Idp access token

[vineetd]

This thread basically answers the questions surrounding multiple access tokens from the ID provider.

Manage and refresh access tokens for identity providers

Hi @kostrse As a small preface for this topic: The ability for accessing the access tokens and refresh tokens issued by external identity providers is somewhat debated. In the broader scheme of things, Auth0 is the “client” for these identity providers and our main business with them is authentication. That is, we are looking for help authenticating the user (and getting basic information about them, which we then normalize and store and so on). We don’t need the access token for anything else…

Not the answer I was looking for, but at least I have learned that Auth0’s role is limited to caching IDP access token used for authentication and the recommendation is create additional tokens with different scopes for other purposes.