Google Refresh token rule is incorrect

https://github.com/auth0/rules/blob/master/rules/google-refresh-token.md

is wrong. refresh_token is stored in the identities array. It can be retrieved like the access_token

[DzmitryU]

@mtt87 You where totally right. scope: offline_access and access_type: offline are different options. Finally I’ve just added to my request following line:

.parameters(["access_type" : "offline", "approval_prompt" : "force"]) // parameters to obtain google refresh token

It helped and now after log in user.identities contains google refresh token. Thanks a lot! You helped me to solve issue, I was working with for long time.

[mtt87]

I think I’ve spotted the problem it’s not scope: offline_access but it’s an additional parameter access_type: offline

This is an example of what I’m doing, I hope it helps.

1. The user has to signup using your webapp and you are asking for offline access so make sure the user see the permission to allow offline access. This is an example config for lock that I use on my webapp

this.lock = new Auth0Lock('xxxxxx', 'xxx.eu.auth0.com', {
        initialScreen:'login',
        allowedConnections: ['google-oauth2'],
        allowSignUp: false,
        auth: {
          redirect: false,
          responseType: "token",
          approval_prompt: 'force',
          params: {
            'access_type': 'offline',
            'approval_prompt' : 'force'
          },
        },
        autoclose: true
      });

1. Right after the user signed up you are able from the server to make the request to retrieve the google refresh_token. As far as I understood, you can do this only the first time and then you won’t be able to retrieve the token anymore. What I do is make a POST /users to create the new user with { userId: xxx, userEmail: yyy }, then the server is making a request using management API to retrieve the user. See that there is no scope or stuff like that, it’s just a plain call.

app.post('/users', jwtCheck, (req, res) => {
  const { userId, userEmail } = req.body;
  auth0Management.users.get({
    id: userId,
  }).then((user) => {
    // retrieve Google refresh_token from Auth0 and save it for future use
    if (user.identities[0].refresh_token !== undefined) {
      const { refresh_token, access_token } = user.identities[0];
    // do something with your token