Refresh Tokens are credentials used to obtain access tokens . Refresh tokens are issued to the client by the authorization server and are used to obtain a new access token when the current access token becomes invalid or expires, or to obtain additional access tokens with identical or narrower scope.20 May 2017