[mitreid-connect] obtaining refresh token ...

Justin Richer jricher at mit.edu
Fri Dec 16 16:47:06 EST 2016


You probably had it correct in your request, but your client also needs 
to be registered in a way to allow requesting that scope. The admin 
interface will allow this in either the list of scopes or in the 
"tokens" tab where you can check a box to say the client gets refresh 
tokens (this has the same effect).

  -- Justin


On 12/16/2016 4:45 PM, Steven Carmody wrote:
> thanks ! I added a scope parameter to my access token request, and I 
> got this response from the server:
>
> "error_description":"Invalid scope; requested:[offline_access]"
>
> should I have added the scope request someplace else ?
>
> On 12/16/16 2:56 PM, Justin Richer wrote:
>> You have to request and approve the “offline_access” scope to get a
> refresh token. This is true even if you’re not doing OpenID Connect.
>>
>>  — Justin
>>
>>> On Dec 16, 2016, at 1:57 PM, Steven Carmody 
>>> <steven_carmody at brown.edu> wrote:
>>>
>>> Hi,
>>>
>>> my access token request returns values for access_token and token_type
>>> .... do I have to do something special to have this package also return
>>> a refresh token ? I didn't think so ... ?
>>>
>>> thanks !
>>> _______________________________________________
>>> mitreid-connect mailing list
>>> mitreid-connect at mit.edu
>>> http://mailman.mit.edu/mailman/listinfo/mitreid-connect
>>
>



More information about the mitreid-connect mailing list