Does the refresh token obtained through the OAuth 2.0 for Apps REST API expire?

[Marco Roman]

I'm following the OAuth 2.0 developer guide and I retrieved bearer tokens as described in section 2. Exchange authorization code for access token. I included the offline_access scope in the original authorization request to get a refresh token in the following response:

{
 "access_token":"{access_token_value}",
 "refresh_token":"{refresh_token_value}",
 "scope":"read:jira-work offline_access",
 "token_type":"Bearer",
 "expires_in":3600
}

Just out of curiosity, does that "expires_in" value apply to both the access and refresh tokens? If not, when do refresh tokens expire?

[DPKJ · Accepted solution]

@Marco RomanAtlassian have followed standard RFC guidelines, and Refresh Token doesn't not expire as per these guidelines.

Here is a link to an answer submitted Atlassian Team member - https://community.atlassian.com/t5/Answers-Developer-Questions/Does-the-oauth-2-refresh-token-expire/qaq-p/574230

[Marco Roman]

Thank you for the rapid response! All clear now.