且构网

分享程序员开发的那些事...
且构网 - 分享程序员编程开发的那些事

Spring Boot OAuth 不会为客户端返回刷新令牌

更新时间:2021-09-01 22:07:25

4.3.3.RFC 6749(OAuth 2.0 授权框架)中的访问令牌响应说不应包含刷新令牌." 因此,OAuth 2.0 授权服务器的大多数实现不会在 客户端凭据流程.

4.3.3. Access Token Response in RFC 6749 (The OAuth 2.0 Authorization Framework) says "A refresh token SHOULD NOT be included." Therefore, most implementations of OAuth 2.0 authorization servers do not generate a refresh token in Client Credentials flow.