Invalid_Grant error when using Refresh Token

2
votes

I am using IdentityServer3's Hybrid Flow. I have enabled the offline_access scope inorder to get refresh token. When my access token expires, I am calling core/connect/token endpoin. I am passing client_id, client_secret, refresh_token and grant_type (= refresh_token) as part of body. I am getting invalid_grant error.

1
identityaccess-tokenthinktecture-ident-serveridentityserver3thinktecture
have you tried turning on logging? - leastprivilege

1 Answers

2
votes

Make sure that the Client configuration should have "RefreshTokenExpiration" attribute set as TokenExpiration.Absolute and "RefreshTokenUsage" attribute is set to "OneTimeOnly". This should make it work !