Just in case anyone gets stuck here, I had to go to the Admin UI -> Applications -> Security -> Enable refresh.

It wasn't very clear from the docs as I didn't expect that setting to be there. Would have made more sense if it was under JWT

Just in case anyone gets stuck here, I had to go to the Admin UI -> Applications -> Security -> Enable refresh.

It wasn't very clear from the docs as I didn't expect that setting to be there. Would have made more sense if it was under JWT

@mark-robustelli Thanks. I'll do just that

@mark-robustelli

I am using the typescript-client-library.

export const fusionAuthClient: FusionAuthClient = new FusionAuthClient(
  process.env.FUSION_AUTH_API_KEY!,
  process.env.FUSION_AUTH_URL!
);

@mark-robustelli

Here's how I use it in the code

const response = await this.fusionAuthClient.twoFactorLogin({
        applicationId,
        code,
        twoFactorId,
        ipAddress,
        metaData: {
          device: {
            name: deviceName,
            type: deviceType,
          },
        },
        eventInfo: {
          deviceName,
          deviceType,
          data: {
            deviceId,
          },
        },
      });
      if (!response.wasSuccessful()) {
        logger.error(
          { twoFactorId, deviceData, ipAddress },
          `Failed to verify the MFA, ${response.exception.message}`
        );
        return { type: 'failure', error: new VerifyMfaFailed() };
      }
      logger.info(
        { response: response.response },
        `The response from the two factor login`
      );

The response.response does not contain refreshToken at all from the logs

My application setup to show support for jwt and refresh

My OAuth settings in my application

I setup my users to use MFA and have that working successfully but when they put in the code from the Authenticator app, they only get an access-token. The refresh-token is undefined.

Steps I have carried out

• The Application's Oauth setting has Generate refresh tokens enabled
• The Application's Jwt is enabled with Refresh token duration set
• The Tenant's Jwt is also enabled

In the code, I use the twoFactorLogin and I send the twoFactorId, applicationId, code and some eventInfo and iP./

Result

• Returns the user
• Returns the token
• Does not return the refreshToken