Understanding the OAuth 2.0 Directly from the IETF RFC 6749

Currently Playing: 1.5 Refresh Token - Understanding OAuth 2.0 Directly from the IETF RFC 6749 Specification

In this video discuss section 1.5 "Refresh Token" of the OAuth 2.0 Specification (IETF RFC 6749). https://tools.ietf.org/html/rfc6749#section-1.5 I discuss how refresh tokens used to obtain new access tokens when an access token has expired. Refresh tokens are only used with an Authorization server, they are never sent to a Resource server. Also, the "Implicit" grant type cannot get a refresh token because of the inherent insecurity. This video is part of a series: https://www.youtube.com/playlist?list=PLjuQOVlnQv2UUmUuq_ZuwFyVEXanuGh9v