capabilities.work

Rotate Refresh Token

A 3-step recipe with Prismatic. We can help you get access.

Recipe · 3 steps

Rotate Refresh Token

Refresh, validate, and then revoke the prior refresh token.

  1. Exchange the current refresh token for a fresh JWT access token.
  2. Validate the new access token by running the documented listCustomers GraphQL query.
  3. Revoke the original refresh token now that a validated access token is in hand.
What you'll need to have ready
  • refreshToken: The current Prismatic refresh token to rotate out.
For your developer

Arazzo workflow prismatic:rotate-refresh-token, 3 operations: refreshAuthToken → executeGraphQLQuery → revokeAuthToken. Specs on APIs.io.