I must first state, I am shaking on Identity in general, especially with the notion of using refresh tokens.
Here is my OAuth Configuration in my Owin.Startup class
public void ConfigureOAuth(IAppBuilder app)
{
OAuthAuthorizationServerOptions OAuthServerOptions = new OAuthAuthorizationServerOptions()
{
AllowInsecureHttp = true,
TokenEndpointPath = new PathString("/token"),
AccessTokenExpireTimeSpan = TimeSpan.FromMinutes(30),
Provider = new ColossalAuthorizationServerProvider(),
RefreshTokenProvider = new ColossalRefreshTokenProvider()
};
//Token generation
app.UseOAuthAuthorizationServer(OAuthServerOptions);
app.UseOAuthBearerAuthentication(new OAuthBearerAuthenticationOptions());
}//ConfigureOAuth()
Making a request to the token endpoint at my localhost via postman
Go to the complete details ...