KindeK
Kinde9mo ago
7 replies
j

How does refresh token actually work?

Hello, I am building a remix app and transitioning to Kinde for refresh tokens.

I set the access token to expire in 1 minute to test token expiry.

If token expires and we make a call to getToken() I would expect it to give back the header with refreshed access token since the token is expired.

But it doesn't – and even if I call refreshTokens() explicitly, it still gives back the outdated token.

After a hard refresh, the user goes into logged out state (since access token is still expired).

I would need to visit /kinde-auth/login (which is smart to detect previous login and not require another login attempt) which will then redirect back to the app with a new token.

The behavior I am seeing is refresh token just isn't being taken into account at all.
Was this page helpful?