I am able to retrieve rotating refresh token using auth0 SPA SDK - however using non-rotating refresh token I am unable to retrieve on SPA (using PKCE authorization flow). I understand the security risk of making non rotating refresh token available to public client (web browser here for example). …

Hi @jmj , Welcome to the Auth0 Community! It sounds like you should be issuing the user a set of client credentials as a third party application. More info here: First-Party and Third-Party Applications

Thanks @dan.woda - yes I read through other similar post and ended up implementing m2m apps and client credentials.

Perfect! Let us know if you have any other questions.

Retrieve non rotating refresh token using SPA sdk

Get Help

jmj August 26, 2022, 10:55pm 6

Since you are asking I have other question where I could use your expertise. Username Password connection, organization & signup

Topic		Replies	Views
Hot to get refresh token using auth0 social login api? Get Help social-connections , login , refresh-tokens , tier1 , refresh_token	3	4062	March 2, 2018
Bearer Token auto renewal for Retool Get Help management-api , users	2	137	March 20, 2025
We've added support for Refresh Token Rotation! Announcements refresh-tokens , announcements , refresh-token-rotate	13	9162	November 2, 2021
Sessions and Refresh Tokens Dev to Dev Hub sessions , rotating-refresh-tokens	1	271	November 11, 2025
Support organization parameter in Refresh Token and Password flow Product Feedback authentication-api , refresh-tokens	8	2332	May 8, 2024

Retrieve non rotating refresh token using SPA sdk

Related topics