Can someone explain to me the purpose of the
refresh token when you're using the Client Credentials grant type with OAuth2? I'm confused because you can easily generate a new
access token without one, so why bother?
For example, to get an
access token you typically only need:
So why would you ever use:
refresh token more applicable when using other grant types (eg. Resource Owner Password Credentials)?