RefreshToken Element

The RefreshToken element lets you customize the way the access token is refreshed in the OAuth flow.

XML Schema of the Element

  <xs:element name="RefreshToken" minOccurs="0">

    <xs:complexType>

      <xs:sequence>

        <xs:element ref="RequestMsgStyle" minOccurs="0"/>

        <xs:element ref="ResponseMsgStyle" minOccurs="0"/>

        <xs:element ref="ExpireTime" minOccurs="0"/>

        <xs:element ref="TokenProcessor" minOccurs="0"/>

      </xs:sequence>

    </xs:complexType>

  </xs:element>

Sequence Element

Description of Values

RequestMsgStyle

According to RFC 6749, the default value is FORM for Authorization Code Grant, Resource Owner Password Credentials Grant, and Customized Flow.

<xs:element name="RequestMsgStyle" minOccurs="0">

    <xs:simpleType>

      <xs:restriction base="xs:string">

        <xs:enumeration value="FORM"/>

        <xs:enumeration value="QUERY"/>

        <xs:enumeration value="QUERYPOST"/>

      </xs:restriction>

    </xs:simpleType>

  </xs:element>

•

QUERY—Append all request parameters of OAuth to the URL as a query string, using the HTTP GET method.

•

QUERYPOST—Add all request parameters of OAuth to URL as query string, using the HTTP POST method.

•

FORM—Add all request parameters of OAuth to the request body, using a Content-Type of application/x-www-form-urlencoded.

ResponseMsgStyle

According to RFC 6749, the default value is JSON for Authorization Code Grant, Resource Owner Password Credentials Grant, and Customized Flow.

<xs:element name="ResponseMsgStyle" minOccurs="0">

    <xs:simpleType>

      <xs:restriction base="xs:string">

        <xs:enumeration value="FORM"/>

        <xs:enumeration value="QUERY"/>

        <xs:enumeration value="JSON"/>

        <xs:enumeration value="RAWBODY"/>

      </xs:restriction>

    </xs:simpleType>

  </xs:element>

•

QUERY—All response parameters of OAuth are returned as a query string appended to a redirect URL.

•

FORM—All response parameters of OAuth are returned with the entity, and Content-Type is application/x-www-form-urlencoded.

•

JSON—All response parameters of OAuth are returned with the entity, and Content-Type is application/json.

•

RAWBODY—All response parameters of OAuth are returned with the entity, but the format is not clearly defined. In this case, use tokenProcessor(JavaScript) to retrieve all parameters.

ExpireTime

Sets an expiration time for the access token, overriding the default time of 5 seconds.

XML Schema of the Element

  <xs:element name="ExpireTime" minOccurs="0">

    <xs:simpleType>

      <xs:restriction base="xs:integer"/>

    </xs:simpleType>

  </xs:element>

TokenProcessor

Gets tokens or other parameters if the authorization response is not in the specified format.

XML Schema of the Element

  <xs:element name="TokenProcessor" minOccurs="0">

    <xs:simpleType>

      <xs:restriction base="xs:string"/>

    </xs:simpleType>

  </xs:element>