1.5 Refresh Token - Understanding OAuth 2.0 Directly from the IETF RFC 6749 Specification

In this video discuss section 1.5 "Refresh Token" of the OAuth 2.0 Specification (IETF RFC 6749).

https://tools.ietf.org/html/rfc6749#section-1.5

I discuss how refresh tokens used to obtain new access tokens when an access token has expired. Refresh tokens are only used with an Authorization server, they are never sent to a Resource server. Also, the "Implicit" grant type cannot get a refresh token because of the inherent insecurity.


This video is part of a series:
https://www.youtube.com/playli....st?list=PLjuQOVlnQv2

• Category

  How-to & Style