When do you need a refresh token in OAuth?
Yes, we must use authorization_code at this stage of the oauth process. you pass in grant_type=refresh_token when you already have a refresh token and you’re requesting a new access token. In this case, we’re requesting authorization for the first time — and a refresh token should be included in this response.
Are there any REST API methods in SSJs?
This severely limits your API capabilities, both internally for Salesforce Marketing Cloud (SFMC) and to any external resource. Is there any way via AMPScript or SSJS to utilize HTTP methods outside of GET and POST?
What does grant _ type = refresh _ token mean?
@Navatar_DbSup: cirrusinsight is correct – grant_type=refresh_token is for passing a refresh token to get a new access token. I just tried an external Ruby app and it gets a refresh_token, just as it used to, no scope required. @cirrusinsight – does dmarchant’s suggestion work for you? @dmarchant – did something change here?
What to do if OAuth is not returning?
In the initial authorization request, the call to https://login.microsoftonline.com/common/oauth2/v2.0/authorize, adding offline_access to the scope query string parameter resolved the issue. Nothing needs to be added or changed on the app registration side.
When do you need a refresh token in Google?
This value instructs the Google authorization server to return a refresh token and an access token the first time that your application exchanges an authorization code for tokens. If you need ‘refresh_token’ again, then you need to remove access for your app as by following the steps written in Rich Sutton’s answer.
Do you get a refresh token when you change scope?
Worth noting, if you change the scope, you’ll get back a refresh token again for users that have already authenticated with the original scope. This is useful if, say, you have a bunch of users already and don’t want to make them all un-auth the app in Google.