Refresh tokens

Shouldn’t those be serialized and sent to the client? Otherwise how will the client know when to update the token:

[JsonIgnore] public DateTime AccessExpiry { get; internal set; }

[JsonIgnore] public DateTime RefreshExpiry { get; internal set; }

Also, woudn’t it be better if DateTime was DateTimeOffset?

EDIT: Also, once i use the refresh token to get a new access token the new token does not seem to contain the claims. As far as i can tell everything has been set up properly inside SetRenewalPrivilegesAsync method. EDIT: After some testing it seems that the priviledges are only not working if you await something within SetRenewalPrivilegesAsync

[dj-nitehawk]

Refresh-Tokens-Demo.zip

check out this updated project. it’s simply a matter of adding a getter only (calculated) property to your derived class, which just transforms the datetime to whatever format the front-end client is capable of handling.

[dj-nitehawk]

thanks for the repro… it was a nasty bug which is now fixed in v5.6.0.6-beta thanks for reporting…