Failing to get a refresh token after token exchange #42128

Timobify · 2025-08-26T07:15:01Z

Timobify
Aug 26, 2025

I am using Keycloak ver 26.3.1, I want to get a both the access and refresh token when moving from one client to another which are both confidential. I have enable the refresh token to be allowed while token exchanging by setting it to same session. below is a snippet of my code

Perform token exchange to issue new tokens for idarp-backend

try:
    token_url = f"{settings.KEYCLOAK_SERVER_URL}/realms/{settings.KEYCLOAK_REALM_NAME}/protocol/openid-connect/token"
    data = {
        "grant_type": "urn:ietf:params:oauth:grant-type:token-exchange",
        "client_id": settings.KEYCLOAK_CLIENT_ID,
        "client_secret": settings.KEYCLOAK_CLIENT_SECRET,
        "subject_token": access_token,
        "subject_token_type": "urn:ietf:params:oauth:token-type:access_token",
        "requested_token_type": "urn:ietf:params:oauth:token-type:refresh_token",
        "scope": "openid email profile offline_access"
    }

    response = requests.post(token_url, data=data)
    response.raise_for_status()
    new_tokens = response.json()
    logger.debug(f"Token exchange response: {new_tokens}")
    new_access_token = new_tokens.get("access_token")
    new_refresh_token = new_tokens.get("refresh_token")
    if not new_access_token:
        logger.error(f"Token exchange failed: No access token returned, response: {new_tokens}")
        return JsonResponse({"error": "Failed to issue new tokens"}, status=400)

except requests.RequestException as e:
    logger.error(f"Token exchange failed: {str(e)}")
    return JsonResponse({"error": f"Failed to issue new tokens: {str(e)}"}, status=400)

I would appreciate an assist you may render so i can conclude this matter

GISSIAH · 2025-08-27T06:53:09Z

GISSIAH
Aug 27, 2025

have you found the solution, I am also struggling with the same issue

0 replies

Navigation Menu

Repository navigation

Failing to get a refresh token after token exchange #42128

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Failing to get a refresh token after token exchange #42128

Uh oh!

Timobify Aug 26, 2025

Perform token exchange to issue new tokens for idarp-backend

Replies: 1 comment

Uh oh!

GISSIAH Aug 27, 2025

Timobify
Aug 26, 2025

GISSIAH
Aug 27, 2025