[ST Schema] Does Refresh_token also have expire time?

Developer Programs Support
1

First, the server structure implemented according to ST’s document is as follows.

슬라이드1
슬라이드11280×720 15.6 KB

And when the access_token we provided expires, ST requests data from grant_type of refresh_token, and we provide the refreshed access_token again.

슬라이드2
슬라이드21280×720 10.8 KB

Questions…

Q1. Will refresh_token expire?

Q2. What should I do when refresh_token expires?

2

Hi, @Sangmin_Kim!

In the case of ST Schema, the refresh token expires until the user deletes the integration from SmartThings, this means when he deletes all the devices that belong to that integration or when he goes to menu > Linked services and deletes it from there.
There’s another case where it can expire but it shouldn’t happen: when the user needs to log in again, this is only if you close the session in your Cloud but it can cause the devices to become offline as well so, it is not recommended.

You can verify the refresh_token doesn’t change when you get a new Access Token, the refresh_token value provided in the response should be the same every time.

3

Thank you for your answer !

Should I think that refresh_token in ST does not expire by time?

4

Correct, it is static since the grantCallbackAccess/accessTokenRequest interaction is triggered. The team mentioned these other scenarios:

  1. The flow can be re-triggered either by the user when ST loses the AccessToken to the third-party cloud (yours). In this case, they would need to login again.
  2. You can also send the requestGrantCallbackAccess parameter in the discoveryResponse with a value of true. However, this is not suggested unless you can’t refresh the callbackAccessToken using the existing refreshToken.