Skip to content

Any plan to introduce the refresh_token scheme? #1441

Closed Answered by tiangolo
retzero asked this question in Questions
Discussion options

You must be logged in to vote

A refresh token wouldn't add any extra security as the final public client would be the same one that gets access to it. A refresh token would make more sense in other OAuth2 flows, like a code flow, where a secure backend can hold the refresh token.

Replies: 1 comment

Comment options

You must be logged in to vote
0 replies
Answer selected by tiangolo
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
2 participants