Hey folks, I have just noticed that the refresh token is reset along with the access token when you request a refresh, is this intentional? I haven’t seen this kind of behavior on other OAuth APIs.
More Specifically:
When you use a refresh token to get the new OAuth access token, the refresh token is also reset in the same request, which means that the next time you need a new access token, you have to use this new refresh token that came in the response of the first reset.
Yes, I noticed the same thing, or rather I made an assumption that that is what is occuring.
The solution would seem simple, just update the refresh_token when you make a refresh request. .
If the refresh_token never updates without a request to it, there should be no problem.
When a access_token fails ( after 30 days ), just request the new access_token and refresh_token at that time.