Update on OpenLogin User Info: missing refresh token in auth0

[hash-o]

This is a follow up question for this issue that has been flagged multiple times but got no responses. The question was this:

[rafael.rodriguez]'s post:
When using web3auth connected with auth0, I get the the access and id token. Expiration time and refresh token are not appended, even if the offline_access scope is given. This is crucial for token rotation and refreshing the session!

Is there an update on this issue? Would be a crucial piece for this Plug n Play sdk. If the Plug n Play SDK doesn’t provide a refresh token, what is the recommended way for native (iOS, Android) apps to use refresh tokens?

[vjgee]

@hash-o Welcome Aboard!

Let me forward your request to our Dev team and we will get an update on the progress.

[hash-o]

thank you @vjgee, looking forward to their response on this

[hash-o]

hey @vjgee did you hear anything back from the Dev team?

[shahbaz]

Hey @hash-o

I have replied to something similar here:

Using Auth0 with Web3Auth

Hey @rafael.rodriguez Did you check Refresh Tokens docs by Auth0? The refresh token is encouraged with the back channel and is not returned in the browser context. The following steps can be taken to get refresh_token to get id_token. Create a new API or, in your existing API, enable offline access. Authenticate your user with oidc and offline_access in scope https://{auth0_tenant}.auth0.com/authorize? audience={api_audience}& scope=openid%20offline_access& response_type=cod…