# Refresh Tokens

<figure><img src="https://3722880708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8Jk7bAtIA6fLVYBLmpdJ%2Fuploads%2Fi6Gml54oWEuhilgWTWMf%2Fimage.png?alt=media&#x26;token=13750fed-6c91-485a-a897-3675fe9a72ff" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3722880708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8Jk7bAtIA6fLVYBLmpdJ%2Fuploads%2FZbJUKW2q5qAezsDWDl3B%2Fimage.png?alt=media&#x26;token=e1738d48-7e7b-4546-899b-6b7b181571dc" alt=""><figcaption></figcaption></figure>

Best approach would be that the user should always be presented with the notification of the new refresh token request, even if he was presented with that in the past.

<figure><img src="https://3722880708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8Jk7bAtIA6fLVYBLmpdJ%2Fuploads%2FWXRBcwxljUQYQwONZj4S%2Fimage.png?alt=media&#x26;token=2014faf2-96cf-4ef5-b401-01b95a656b92" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3722880708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8Jk7bAtIA6fLVYBLmpdJ%2Fuploads%2FNZD6rMSrCCdKK2BIDqeq%2Fimage.png?alt=media&#x26;token=1342d04e-5346-46ce-99fc-019182d0c92b" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3722880708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8Jk7bAtIA6fLVYBLmpdJ%2Fuploads%2FpfXw4SX5tfRxS6QY8unu%2Fimage.png?alt=media&#x26;token=70a9811d-baba-4dc5-98df-6125ebcaeff5" alt=""><figcaption></figcaption></figure>

Refresh Tokens should **NEVER** be exposed to the browser.

<figure><img src="https://3722880708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8Jk7bAtIA6fLVYBLmpdJ%2Fuploads%2FVFUvJGZNrxWjnm9BMWb5%2Fimage.png?alt=media&#x26;token=a20a51d2-8095-4b76-8994-8c7cd53dab46" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3722880708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8Jk7bAtIA6fLVYBLmpdJ%2Fuploads%2FHucbDDvJmkPsubufwRf1%2Fimage.png?alt=media&#x26;token=4f5a93a0-cb21-4241-a8bc-8385972067ac" alt=""><figcaption></figcaption></figure>
