# The access token expired and a refresh token is not available. The user will need to sign in again. What now?

**URL:** <https://community.auth0.com/t/the-access-token-expired-and-a-refresh-token-is-not-available-the-user-will-need-to-sign-in-again-what-now/89971>\
**Category:** Get Help\
**Tags:** refresh-tokens, access-token, auth0\
**Created:** [September 3, 2022, 12:45pm UTC](https://community.auth0.com/t/the-access-token-expired-and-a-refresh-token-is-not-available-the-user-will-need-to-sign-in-again-what-now/89971 "2022-09-03T12:45:26Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![andrea.chiarelli](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/andrea.chiarelli/32/16034_2.png) [@andrea.chiarelli](https://community.auth0.com/u/andrea.chiarelli)\
**Post date:** [September 5, 2022, 8:56am UTC](https://community.auth0.com/t/the-access-token-expired-and-a-refresh-token-is-not-available-the-user-will-need-to-sign-in-again-what-now/89971/2 "2022-09-05T08:56:12Z")

</div>

Hi @amg1,  
I can’t help with the specific next.js issue, but I suggest you ensure refresh token support is enabled before using the `offline_access` scope.

Please, go to your NestJS API in the [Auth0 dashboard](https://manage.auth0.com/#/apis) and enable refresh token support through the _Allow Offline Access_ toggle button

 ![image](https://global.discourse-cdn.com/auth0/original/3X/b/6/b6cb06e198d6e5f2136c5ccd5f55c96ca8cf739f.png)

Save the API settings.

Now, in your app, you can use the `offline_access` scope to get a refresh token along with the ID and access token.

References:

- [Get Refresh Tokens](https://auth0.com/docs/secure/tokens/refresh-tokens/get-refresh-tokens)
- [Use Refresh Tokens](https://auth0.com/docs/secure/tokens/refresh-tokens/use-refresh-tokens)

I also suggest enabling refresh token rotation to improve security (Auth0 dashboard → your App → _Refresh Token Rotation_ section).  
Check out [this article](https://auth0.com/blog/refresh-tokens-what-are-they-and-when-to-use-them/) to learn more about refresh tokens.

I hope this may help.

---

_[View the full topic](https://community.auth0.com/t/the-access-token-expired-and-a-refresh-token-is-not-available-the-user-will-need-to-sign-in-again-what-now/89971)._