SecurityIntermediate

Refresh token

Also known as OAuth refresh token

A credential used with an authorization server to obtain a new access token without repeating the full login flow.

In the real world

When an access token expires, the client exchanges an eligible refresh token at the token endpoint.

Related

Go a little deeper