This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 16%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHJ%3C/text%3E%3C/svg%3E)
Hello,
I am using OAuth 2.0 for authorization and using msal-node package I successfully got an access token in response but did not get a refresh token I am using User.Read scope to get access token
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(112.00000000000001, 85%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENM%3C/text%3E%3C/svg%3E)
@Himanshu Joshi - To obtain a refresh token, you need to include the offline_access scope in your authorisation request. This scope is specifically designed to request a refresh token, which allows your application to maintain access to resources without requiring the user to re-authenticate
Thanks,
Nivedipa
*************************************************************************
You can share your feedback via Microsoft Teams Developer Feedback link. Click hereto escalate.
const tokenRequest = {
code: req.query.code,
scopes: ["User.Read", "offline_access", "openid"],
redirectUri: REDIRECT_URI,
};
pca.acquireTokenByCode(tokenRequest).then(async (response) => {
console.log('response: ', response);
I passed the above scopes but still not get refresh token
I am getting the below scopes in response
scopes: [
'Calendars.Read',
'Calendars.Read.Shared',
'Calendars.ReadBasic',
'Calendars.ReadWrite',
'Calendars.ReadWrite.Shared',
'CallEvents.Read',
'Directory.AccessAsUser.All',
'Directory.Read.All',
'Directory.ReadWrite.All',
'Files.Read',
'Files.Read.All',
'Files.Read.Selected',
'Files.ReadWrite',
'Files.ReadWrite.All',
'Files.ReadWrite.AppFolder',
'Files.ReadWrite.Selected',
'Files.SelectedOperations.Selected',
'Group.Read.All',
'Group.ReadWrite.All',
'OnlineMeetingAiInsight.Read.All',
'OnlineMeetingArtifact.Read.All',
'OnlineMeetingRecording.Read.All',
'OnlineMeetings.Read',
'OnlineMeetings.ReadWrite',
'OnlineMeetingTranscript.Read.All',
'openid',
'profile',
'Sites.FullControl.All',
'Sites.Manage.All',
'Sites.Read.All',
'Sites.ReadWrite.All',
'Sites.Selected',
'Team.Create',
'Team.ReadBasic.All',
'User.DeleteRestore.All',
'User.EnableDisableAccount.All',
'User.Export.All',
'User.Invite.All',
'User.ManageIdentities.All',
'User.Read',
'User.Read.All',
'User.ReadBasic.All',
'User.ReadWrite',
'User.ReadWrite.All',
'User.RevokeSessions.All',
'email'
],
@Himanshu Joshi - Ensure that your application is registered correctly in the Azure portal and that it has the necessary API permissions. Specifically, verify that the offline_access permission is granted.
Sometimes, even if the scopes are included, the permissions might not be granted until an admin consents to them. Make sure that admin consent has been granted for the required permissions.
To obtain a refresh token, you need to include the offline_access scope in your authorisation request. This scope is specifically designed to request a refresh token, which allows your application to maintain access to resources without requiring the user to re-authenticate
Thanks,
Nivedipa
*************************************************************************
You can share your feedback via Microsoft Teams Developer Feedback link. Click hereto escalate.