Ah ok. In your case the behavior seems logical to me: - Refresh token is not renewed at all because your setting is 'Re use' - Expiration is set to '30 days' - With every new access token, the refresh tokens remains equal to the 1st one Because the access token is not renewed and expiration is set to '30 days', it makes sense in this case that after 30 days the refresh token is invalidated. In my case, however, I set refresh token usage to 'One time'. With every new access token I also get a new refresh token (which should be valid for 30 days each in my opinion). After 30 days the newly received refresh token (which is created that same day) is invalidated within 1 hour, whereas I would expect that only the very first access token would be invalidated if it hadn't be used after 30 days. Other API's with oAuth I know all work that way. @Visma?
... View more