Forum Discussion

zachtines's avatar
zachtines
Contributor
5 months ago

Refresh Token not returned from accessToken endpoint

For the Community API, Using the OAuth 2.0 grant flow, we're able to successfully retrieve an access token from the /api/2.0/auth/accessToken endpoint. However, in it's response the refresh_token fi...
AdamN's avatar
AdamN
Khoros Oracle

Hi zachtines , I'd suggest checking whether the account you're using to login has Auto Sign-in enabled. If so, the refresh token will not be returned. This is what the "Note" on this page is referring to: https://developer.khoros.com/khoroscommunitydevdocs/reference/request-auth-token-oauth

One thing that's not clear from the documentation is that disabling Auto Sign-in via the admin will not resolve this issue for existing accounts, since the preference will have already been stored in the existing account. You would need to login to the UI with the account and disable Auto Sign-in in the individual account's preferences.

I hope this helps!

internal_eic's avatar
internal_eic
Contributor
2 months ago

Hi AdamN

I'm facing the similar issue.

The Turn-off Auto Sign-in checkbox is enabled in the Community Admin > System > Auto Signin / Cookies. If we clear it to generate both access token and refresh token, then will it have any impact?