Plans for refresh tokens with OAuth2?

[Former Member]

Hello,

Does anyone know if there are plans for allowing the use of refresh tokens with netweaver gateway's implementation of OAuth? The context I'm thinking of is when using the authorization code flow as described here: Using OAuth 2.0 from a Web Application with Authorization Code Flow - Security and Identity Manageme...

Without a refresh token, the users need to keep authorizing the app...

Thanks!

[martin_blust · Accepted solution]

Hello Alejandro,

As of SP10 of SAP NetWeaver AS for ABAP 7.4, refresh tokens are available. If you use the SOAUTH2 transaction for configuring the OAuth 2.0 flow (and if refresh tokens are available in your SP), you will see the parameters Refresh Allowed and Refresh Token Expires After. Use these parameter to enable refresh tokens.

Documentation is available in the system after having right-clicked the fields under More Field Help and in t´he SAP Help Portal under Requesting an OAuth 2.0 Access Token - User Authentication and Single Sign-On - SAP Library.

I hope this helps.

Martin

See the attached screen shot of th OAuth 2.0 configuration:

[Former Member · Accepted solution]

Thanks Martin!! Great

[Former Member · Accepted solution]

Very cool! Thank you for the update Martin!

[Former Member]

Hi Brian, we are having the same problem, have you found a solution?

Thank you!