What do I do with google idp refresh token?

[patrickcorrigan7]

I’m authentication with google and requesting offline access. I have the correct permissions, everything is working. I get an access token and a refresh token from the management api which I can use to make requests to the google API. After an hour it seems to expire and when I call then management API the refresh token is gone.

Is it up to me to store the refresh token in my backend and use it to get a new access token?

[markd]

Hi @patrickcorrigan7. Yes, you need to store the refresh token in your back end. You can then present the refresh token to the authz server to request a new access token.

[konrad.sopala]

Thanks Mark for helping on this front!