<\/div>\n
Merhaba,<\/p>\n
Bu i\u00e7eri\u011fimizde OpenIddict k\u00fct\u00fcphanesinde refresh token kullan\u0131m\u0131n\u0131 nas\u0131l etkinle\u015ftirebilece\u011fimizi inceliyor olaca\u011f\u0131z.<\/p>\n
Refresh Token Neydi?<\/h3>\n
Malumunuz refresh token, OAuth 2.0 tabanl\u0131 bir yetkilendirme mekanizmas\u0131d\u0131r. Access token’\u0131n ge\u00e7erlilik s\u00fcresi sona erdi\u011fi taktirde, kullan\u0131c\u0131y\u0131 login ekran\u0131na y\u00f6nlendirmeye gerek kalmaks\u0131z\u0131n, yani kullan\u0131c\u0131n\u0131n yapt\u0131\u011f\u0131 i\u015fin oda\u011f\u0131n\u0131 bozmaks\u0131z\u0131n yeniden bir access token alabilmesini sa\u011flayan bir davran\u0131\u015fa sahiptir. Yap\u0131sal olarak access token’dan daha uzun \u00f6m\u00fcrl\u00fc olan refresh token’lar uzun s\u00fcreli oturumlar\u0131 y\u00f6netmek i\u00e7in yayg\u0131n olarak kullan\u0131lmaktad\u0131rlar.<\/p>\n

Refresh Token’\u0131 Etkinle\u015ftirme<\/h3>\n
Uygulaman\u0131zda OpenIddict ile refresh token’\u0131 etkinle\u015ftirebilmek i\u00e7in Authorization Server’da AllowRefreshTokenFlow<\/code> fonksiyonu e\u015fli\u011finde a\u015fa\u011f\u0131daki gibi refresh token ak\u0131\u015f\u0131n\u0131 yap\u0131land\u0131rman\u0131z gerekmektedir.<\/p>\n
\n\r\nusing Microsoft.AspNetCore.Authentication.Cookies;\r\nusing Microsoft.EntityFrameworkCore;\r\nusing OpenIddict.RefreshToken.Example.AuthorizationServer.Models;\r\n\r\nvar builder = WebApplication.CreateBuilder(args);\r\n\r\nbuilder.Services.AddControllersWithViews();\r\n\r\nbuilder.Services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)\r\n    .AddCookie(CookieAuthenticationDefaults.AuthenticationScheme, options => options.LoginPath = "\/account\/login");\r\n\r\nbuilder.Services.AddOpenIddict()\r\n    .AddCore(options => options.UseEntityFrameworkCore()\r\n                               .UseDbContext<ApplicationDbContext>())\r\n    .AddServer(options =>\r\n    {\r\n        options.SetTokenEndpointUris("\/connect\/token")\r\n               .\r\n               .\r\n               .\r\n\r\n               .AllowClientCredentialsFlow()\r\n               .AllowAuthorizationCodeFlow()\r\n               .AllowRefreshTokenFlow()\r\n\r\n               .\r\n               .\r\n               .\r\n\r\n        options.RegisterScopes("read", "write");\r\n    });\r\n\r\n.\r\n.\r\n.\r\napp.Run();\r\n\r\n<\/pre>\n<\/div>\nDevam\u0131nda ise yine Authorization Server’daki ‘AuthorizationController’ i\u00e7erisindeki Exchange<\/code> fonksiyonunda a\u015fa\u011f\u0131daki gibi refresh token operasyonlar\u0131n\u0131 ger\u00e7ekle\u015ftiriniz.<\/p>\n
\n\r\n    public class AuthorizationController : Controller\r\n    {\r\n        .\r\n        .\r\n        .\r\n\r\n        [HttpPost("~\/connect\/token")]\r\n        public async Task<IActionResult> Exchange()\r\n        {\r\n            var request = HttpContext.GetOpenIddictServerRequest();\r\n            ClaimsPrincipal principal = null;\r\n            if (request?.IsAuthorizationCodeFlow() is not null)\r\n            {\r\n                .\r\n                .\r\n                .\r\n            }\r\n            else if (request?.IsRefreshTokenGrantType() is not null)\r\n            {\r\n                principal = (await HttpContext.AuthenticateAsync(OpenIddictServerAspNetCoreDefaults.AuthenticationScheme)).Principal;\r\n\r\n                principal.AddClaim(Claims.Name, "Gen\u00e7ay");\r\n                principal.AddClaim(Claims.Profile, "Gen\u00e7ay Profile");\r\n                principal.AddClaim(Claims.Email, "Gen\u00e7ay Email");\r\n                principal.AddClaim("ornek-claim", "\u00d6rnek Claim");\r\n                principal.AddClaim(JwtRegisteredClaimNames.Aud, "Example-OpenIddict");\r\n\r\n                foreach (var claim in principal.Claims)\r\n                    claim.SetDestinations(Destinations.AccessToken, Destinations.IdentityToken);\r\n\r\n                \/\/Principal'\u0131 yani kullan\u0131c\u0131y\u0131 do\u011frula\r\n                \/\/if ((await _userManager.GetUserAsnyc(principal)) != null)\r\n                \/\/{\r\n\r\n                \/\/}\r\n            }\r\n            else if (request?.IsClientCredentialsGrantType() is not null)\r\n            {\r\n                .\r\n                .\r\n                .\r\n            }\r\n            else\r\n                throw new NotImplementedException("The specified grant type is not implemented.");\r\n            return SignIn(principal, OpenIddictServerAspNetCoreDefaults.AuthenticationScheme);\r\n        }\r\n        .\r\n        .\r\n        .\r\n    }\r\n<\/pre>\n<\/div>\nAuthorization Server’da refresh token yap\u0131land\u0131rmas\u0131n\u0131 ger\u00e7ekle\u015ftirdikten sonra gerisi art\u0131k client taraf\u0131ndaki \u00e7al\u0131\u015fmalara kalmaktad\u0131r. Bizler burada izafi olarak refresh token’\u0131 kullanmay\u0131 ele alacak ve \u00f6ylece i\u00e7eri\u011fimizi sonland\u0131r\u0131yor olaca\u011f\u0131z.<\/p>\n
Misal olarak, client uygulamas\u0131n\u0131n ‘Index.cshtml’ dosyas\u0131na a\u015fa\u011f\u0131daki gibi refresh token talebinde bulunabilece\u011fimiz bir adres eklememiz ve ‘AuthenticationController’ i\u00e7erisinde gerekli \u00e7al\u0131\u015fmalar\u0131 yapmam\u0131z refresh token’\u0131 uygulama \u00e7ap\u0131nda test edebilmek i\u00e7in gayet yerinde olacakt\u0131r.<\/p>\n
\n\r\n-- Index.cshtml\r\n\r\n@model string\r\n\r\n@{\r\n    ViewData["Title"] = "Home Page";\r\n}\r\n\r\n<div class="text-center">\r\n    <h1 class="display-4">Welcome<\/h1>\r\n    <p>Learn about <a href="https:\/\/docs.microsoft.com\/aspnet\/core">building Web apps with ASP.NET Core<\/a>.<\/p>\r\n<\/div>\r\n\r\n<form asp-action="Index" asp-controller="Home" asp-route-button="GET">\r\n    <button>Get \u0130stek Yap<\/button>\r\n<\/form>\r\n\r\n<form asp-action="Index" asp-controller="Home" asp-route-button="POST">\r\n    <button>Post \u0130stek Yap<\/button>\r\n<\/form>\r\n\r\n<form asp-action="Logout" asp-controller="Authentication" method="post">\r\n    <button class="btn btn-lg btn-danger" type="submit">Sign out<\/button>\r\n<\/form>\r\n\r\n<a asp-action="Refresh" asp-controller="Authentication">Refresh Token<\/a>\r\n\r\n@if (ViewBag.Properties is not null)\r\n{\r\n    <ul>\r\n        @foreach (var property in ViewBag.Properties as IOrderedEnumerable<KeyValuePair<string, string>>)\r\n        {\r\n            <li>@property.Key ====> @property.Value<\/li>\r\n        }\r\n    <\/ul>\r\n}\r\n\r\n<p>\r\n    @Model\r\n<\/p>\r\n<\/pre>\n<\/div>\n\n\r\nusing IdentityModel.Client;\r\nusing Microsoft.AspNetCore.Authentication;\r\nusing Microsoft.AspNetCore.Authentication.Cookies;\r\nusing Microsoft.AspNetCore.Mvc;\r\nusing Microsoft.IdentityModel.Protocols.OpenIdConnect;\r\nusing OpenIddict.Client.AspNetCore;\r\nusing System.Security.Claims;\r\nusing static OpenIddict.Abstractions.OpenIddictConstants;\r\n\r\nnamespace OpenIddict.RefreshToken.Example.Client1.Controllers\r\n{\r\n    public class AuthenticationController : Controller\r\n    {\r\n        [HttpGet("~\/login")]\r\n        public IActionResult LogIn(string returnUrl)\r\n        {\r\n            var properties = new AuthenticationProperties(new Dictionary<string, string?>\r\n            {\r\n                [OpenIddictClientAspNetCoreConstants.Properties.Issuer] = "https:\/\/localhost:7249"\r\n            });\r\n            properties.RedirectUri = Url.IsLocalUrl(returnUrl) ? returnUrl : "\/";\r\n\r\n            \/\/Challenge metodu ile OpenIddict middleware'\u0131 sayesinde ilgili Issuer'a kar\u015f\u0131l\u0131k gelen client bilgilerini authorization server'a y\u00f6nlendiriyoruz.\r\n            return Challenge(properties, OpenIddictClientAspNetCoreDefaults.AuthenticationScheme);\r\n        }\r\n\r\n        [HttpPost("~\/logout"), ValidateAntiForgeryToken]\r\n        public async Task<ActionResult> LogOut(string returnUrl)\r\n        {\r\n            \/\/Elde bulunan authentication cookie bilgilerini elde ediyoruz. E\u011fer yoksa zaten kullan\u0131c\u0131n\u0131n hen\u00fcz oturum a\u00e7mad\u0131\u011f\u0131n\u0131 anl\u0131yoruz.\r\n            var result = await HttpContext.AuthenticateAsync(CookieAuthenticationDefaults.AuthenticationScheme);\r\n            if (result is not { Succeeded: true })\r\n                return Redirect(Url.IsLocalUrl(returnUrl) ? returnUrl : "\/");\r\n\r\n            \/\/SignOut yaparak mevcut authentication cookie bilgilerini temizliyoruz.\r\n            await HttpContext.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);\r\n\r\n            var properties = new AuthenticationProperties(new Dictionary<string, string?>\r\n            {\r\n                [OpenIddictClientAspNetCoreConstants.Properties.Issuer] = "https:\/\/localhost:7249",\r\n                [OpenIddictClientAspNetCoreConstants.Properties.IdentityTokenHint] = result.Properties.GetTokenValue(OpenIddictClientAspNetCoreConstants.Tokens.BackchannelIdentityToken)\r\n            });\r\n            properties.RedirectUri = Url.IsLocalUrl(returnUrl) ? returnUrl : "\/";\r\n\r\n            return SignOut(properties, OpenIddictClientAspNetCoreDefaults.AuthenticationScheme);\r\n        }\r\n\r\n        [HttpGet("~\/callback\/login\/{provider}"), HttpPost("~\/callback\/login\/{provider}"), IgnoreAntiforgeryToken]\r\n        public async Task<ActionResult> LogInCallback()\r\n        {\r\n            \/\/ OpenIddict taraf\u0131ndan do\u011frulanan yetkilendirme verilerini elde ediyoruz.\r\n            var result = await HttpContext.AuthenticateAsync(OpenIddictClientAspNetCoreDefaults.AuthenticationScheme);\r\n\r\n            if (result.Principal.Identity is not ClaimsIdentity { IsAuthenticated: true })\r\n                throw new InvalidOperationException("The external authorization data cannot be used for authentication.");\r\n\r\n            var claims = new List<Claim>(result.Principal.Claims\r\n                             .Select(claim => claim switch\r\n                             {\r\n                                 { Type: Claims.Subject } => new Claim(ClaimTypes.NameIdentifier, claim.Value, claim.ValueType, claim.Issuer),\r\n                                 { Type: Claims.Name } => new Claim(ClaimTypes.Name, claim.Value, claim.ValueType, claim.Issuer),\r\n                                 _ => claim\r\n                             }));\r\n\r\n            var identity = new ClaimsIdentity(claims,\r\n                authenticationType: CookieAuthenticationDefaults.AuthenticationScheme,\r\n                nameType: ClaimTypes.Name,\r\n                roleType: ClaimTypes.Role);\r\n\r\n            var properties = new AuthenticationProperties(result.Properties.Items);\r\n\r\n            \/\/Gerekirse authorization server taraf\u0131ndan d\u00f6nd\u00fcr\u00fclen tokenlar authentication cookie'de de saklanabilir.\r\n            properties.StoreTokens(result.Properties.GetTokens().Where(token => token switch\r\n            {\r\n                {\r\n                    Name: OpenIddictClientAspNetCoreConstants.Tokens.BackchannelAccessToken or\r\n                          OpenIddictClientAspNetCoreConstants.Tokens.BackchannelIdentityToken or\r\n                          OpenIddictClientAspNetCoreConstants.Tokens.RefreshToken\r\n                } => true,\r\n                _ => false\r\n            }));\r\n\r\n            await HttpContext.SignInAsync(CookieAuthenticationDefaults.AuthenticationScheme, new ClaimsPrincipal(identity), properties);\r\n\r\n            return Redirect(properties.RedirectUri);\r\n        }\r\n\r\n        [HttpGet("~\/callback\/logout\/{provider}"), HttpPost("~\/callback\/logout\/{provider}"), IgnoreAntiforgeryToken]\r\n        public async Task<ActionResult> LogOutCallback()\r\n        {\r\n            var result = await HttpContext.AuthenticateAsync(OpenIddictClientAspNetCoreDefaults.AuthenticationScheme);\r\n            return Redirect(result!.Properties!.RedirectUri);\r\n        }\r\n\r\n        [HttpGet("~\/refresh")]\r\n        public async Task<IActionResult> Refresh()\r\n        {\r\n            string refreshToken = await HttpContext.GetTokenAsync(OpenIddictClientAspNetCoreConstants.Tokens.RefreshToken);\r\n            HttpClient httpClient = new HttpClient();\r\n            RefreshTokenRequest refreshTokenRequest = new RefreshTokenRequest()\r\n            {\r\n                ClientId = "my-client1",\r\n                ClientSecret = "my-client-secret1",\r\n                RefreshToken = refreshToken,\r\n                Address = (await httpClient.GetDiscoveryDocumentAsync("https:\/\/localhost:7249")).TokenEndpoint\r\n            };\r\n            TokenResponse tokenResponse = await httpClient.RequestRefreshTokenAsync(refreshTokenRequest);\r\n            AuthenticationProperties properties = (await HttpContext.AuthenticateAsync()).Properties;\r\n\r\n            properties.StoreTokens(\r\n                new List<AuthenticationToken> {\r\n              new AuthenticationToken\r\n                                     {\r\n                                         Name = OpenIddictClientAspNetCoreConstants.Tokens.BackchannelIdentityToken,\r\n                                         Value = tokenResponse.IdentityToken\r\n                                     },\r\n              new AuthenticationToken\r\n                                     {\r\n                                         Name = OpenIddictClientAspNetCoreConstants.Tokens.BackchannelAccessToken,\r\n                                         Value = tokenResponse.AccessToken\r\n                                     },\r\n              new AuthenticationToken\r\n                                     {\r\n                                         Name = OpenIddictClientAspNetCoreConstants.Tokens.RefreshToken,\r\n                                         Value = tokenResponse.RefreshToken\r\n                                     },\r\n              new AuthenticationToken\r\n                                     {\r\n                                         Name = OpenIdConnectParameterNames.ExpiresIn,\r\n                                         Value = DateTime.UtcNow.AddSeconds(tokenResponse.ExpiresIn).ToString("O")\r\n                                     },\r\n                                       });\r\n            await HttpContext.SignInAsync(CookieAuthenticationDefaults.AuthenticationScheme, (await HttpContext.AuthenticateAsync()).Principal, properties);\r\n            return RedirectToAction("Index", "Home");\r\n        }\r\n    }\r\n}\r\n<\/pre>\n<\/div>\nBurada 97<\/em><\/strong> ile 136.<\/em><\/strong> sat\u0131r aral\u0131\u011f\u0131na g\u00f6z atarsan\u0131z e\u011fer resfresh token ile ilgili gerekli \u00e7al\u0131\u015fmalar y\u00fcr\u00fct\u00fclmektedir. \u00d6nce 99.<\/em><\/strong> sat\u0131rda uygulamadaki refresh token elde edilmekte ve ard\u0131ndan Authorization Server’a bu refresh token e\u015fli\u011finde yap\u0131lan request neticesinde yeni bilgiler edinilmektedir. Burada dikkat ederseniz RefreshTokenRequest<\/code>, TokenResponse<\/code> vs. gibi s\u0131n\u0131flar\u0131 kullanabilmek yani bu operasyonu sa\u011fl\u0131kl\u0131 bir \u015fekilde y\u00fcr\u00fctebilmek i\u00e7in IdentityModel<\/a> k\u00fct\u00fcphanesinden istifade etmekteyiz. Velhas\u0131l, 111<\/em><\/strong> ile 133.<\/em><\/strong> sat\u0131r aral\u0131\u011f\u0131nda ise gelen access token, identity token ve refresh token gibi yeni bilgiler uygulama baz\u0131nda g\u00fcncellenmekte ve 134.<\/em><\/strong> sat\u0131rda SignInAsync<\/code> metodu ile g\u00fcncel verilerle tekrardan oturum tazelenmektedir.<\/p>\n
Tabi burada client uygulamas\u0131n\u0131n konfig\u00fcrasyonlar\u0131nda da refresh token’\u0131n a\u015fa\u011f\u0131daki gibi AllowRefreshTokenFlow<\/code> metodu e\u015fli\u011finde aktifle\u015ftirilmesi ve offline_access<\/code> scope’u e\u015fli\u011finde refresh token de\u011ferinin auth server’dan talep edilmesi gerekmektedir.<\/p>\n
\n\r\n.\r\n.\r\n.\r\nbuilder.Services.AddOpenIddict()\r\n                .AddCore(options =>\r\n                {\r\n                    options.UseEntityFrameworkCore()\r\n                           .UseDbContext<ApplicationDbContext>();\r\n                })\r\n                .AddClient(options =>\r\n                {\r\n                    options.SetRedirectionEndpointUris("\/callback\/login\/local")\r\n                           .SetPostLogoutRedirectionEndpointUris("\/callback\/logout\/local")\r\n\r\n                           .AddDevelopmentEncryptionCertificate()\r\n                           .AddDevelopmentSigningCertificate()\r\n\r\n                           .AllowAuthorizationCodeFlow()\r\n                           .AllowRefreshTokenFlow()\r\n\r\n                           .UseAspNetCore()\r\n                            .EnableStatusCodePagesIntegration()\r\n                            .EnableRedirectionEndpointPassthrough()\r\n                            .EnablePostLogoutRedirectionEndpointPassthrough();\r\n\r\n                    options.UseSystemNetHttp();\r\n\r\n                    options.AddRegistration(new OpenIddictClientRegistration\r\n                    {\r\n                        Issuer = new Uri("https:\/\/localhost:7249", UriKind.Absolute),\r\n\r\n                        ClientId = "my-client1",\r\n                        ClientSecret = "my-client-secret1",\r\n                        Scopes = { "read", "write", "offline_access" },\r\n\r\n                        RedirectUri = new Uri("https:\/\/localhost:7247\/callback\/login\/local", UriKind.Absolute),\r\n                        PostLogoutRedirectUri = new Uri("https:\/\/localhost:7247\/callback\/logout\/local", UriKind.Absolute)\r\n                    }); ;\r\n                })\r\n                .AddValidation(options =>\r\n                {\r\n                    options.UseLocalServer();\r\n                    options.UseAspNetCore();\r\n                });\r\n\r\n.\r\n.\r\napp.Run();\r\n\r\n<\/pre>\n<\/div>\n\u0130\u015fte bu kadar… 19.<\/em><\/strong> sat\u0131rdaki yap\u0131land\u0131rman\u0131n yan\u0131nda 34.<\/em><\/strong> sat\u0131rdaki offline_access<\/code> scope’u e\u015fli\u011finde refresh token talebi ger\u00e7ekle\u015ftirilerek, art\u0131k uygulaman\u0131zda refresh token’\u0131 kullanabilir ve kullan\u0131c\u0131 aktifken biryandan da oturum s\u00fcrecini g\u00fcncelleyebilirsiniz. Tabi bunun i\u00e7in refresh token iznine sahip yeni bir client olu\u015fturulmas\u0131 gerekecektir. Ee haliyle Authorization Server uygulamas\u0131ndaki ‘ClientsController’ i\u00e7erisindeki ‘CreateClient’ metodunu a\u015fa\u011f\u0131daki gibi g\u00fcncelleyebilir ve ard\u0131ndan bu ayarlarda aray\u00fcz \u00fczerinden yeni bir client uygulamas\u0131 olu\u015fturabilirsiniz.<\/p>\n\n\r\n    public class ClientsController : Controller\r\n    {\r\n        .\r\n        .\r\n        .\r\n        [HttpPost]\r\n        public async Task<IActionResult> CreateClient(ClientCreateVM model)\r\n        {\r\n            if (ModelState.IsValid)\r\n            {\r\n                var client = await _openIddictApplicationManager.FindByClientIdAsync(model.ClientId);\r\n                if (client is null)\r\n                {\r\n                    await _openIddictApplicationManager.CreateAsync(new OpenIddictApplicationDescriptor\r\n                    {\r\n                        ClientId = model.ClientId,\r\n                        ClientSecret = model.ClientSecret,\r\n                        DisplayName = model.DisplayName,\r\n                        RedirectUris = { new(model.RedirectUrl) },\r\n                        PostLogoutRedirectUris = { new(model.PostLogoutRedirectUri) },\r\n                        Permissions = {\r\n                                        OpenIddictConstants.Permissions.Endpoints.Token,\r\n                                        OpenIddictConstants.Permissions.Endpoints.Authorization,\r\n                                        OpenIddictConstants.Permissions.Endpoints.Logout,\r\n\r\n                                        OpenIddictConstants.Permissions.GrantTypes.ClientCredentials,\r\n                                        OpenIddictConstants.Permissions.GrantTypes.AuthorizationCode,\r\n                                        OpenIddictConstants.Permissions.GrantTypes.RefreshToken,\r\n\r\n                                        OpenIddictConstants.Permissions.Prefixes.Scope + "read",\r\n                                        OpenIddictConstants.Permissions.Prefixes.Scope + "write",\r\n\r\n                                        Permissions.Scopes.Email,\r\n                                        Permissions.Scopes.Profile,\r\n                                        Permissions.Scopes.Roles,\r\n\r\n                                        OpenIddictConstants.Permissions.ResponseTypes.Code\r\n                                      }\r\n                    });\r\n                    ViewBag.Message = "Client ba\u015far\u0131yla olu\u015fturulmu\u015ftur.";\r\n                }\r\n                else\r\n                    ViewBag.Message = "Client zaten mevcuttur.";\r\n                return View();\r\n            }\r\n\r\n            ViewBag.Message = "L\u00fctfen client bilgilerini tam giriniz.";\r\n            return View(model);\r\n        }\r\n    }\r\n<\/pre>\n<\/div>\n28.<\/em><\/strong> sat\u0131ra g\u00f6z atarsan\u0131z olu\u015fturulacak client’ta refresh token yetkisi verilmektedir.<\/p>\nT\u00fcm bu \u00e7al\u0131\u015fmalardan sonra art\u0131k uygulamay\u0131 aya\u011fa kald\u0131r\u0131p test edebilirsiniz.<\/a>Yukar\u0131daki ekran g\u00f6r\u00fcnt\u00fcs\u00fcn\u00fc incelerseniz e\u011fer refresh token’\u0131n ba\u015far\u0131yla \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 g\u00f6zlemleyeceksiniz.<\/p>\n
\u0130lgilenenlerin faydalanmas\u0131 dile\u011fiyle…
\nSonraki yaz\u0131lar\u0131mda g\u00f6r\u00fc\u015fmek \u00fczere…
\n\u0130yi \u00e7al\u0131\u015fmalar…<\/p>\n
Not : \u00d6rnek \u00e7al\u0131\u015fmay\u0131 a\u015fa\u011f\u0131daki github adresinden edinebilirsiniz.
\nhttps:\/\/github.com\/gncyyldz\/OpenIddict.RefreshToken.Example<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
Merhaba, Bu i\u00e7eri\u011fimizde OpenIddict k\u00fct\u00fcphanesinde refresh token kullan\u0131m\u0131n\u0131 nas\u0131l etkinle\u015ftirebilece\u011fimizi inceliyor olaca\u011f\u0131z. Refresh Token Neydi? Malumunuz refresh token, OAuth 2.0 tabanl\u0131 bir yetkilendirme mekanizmas\u0131d\u0131r. Access token’\u0131n ge\u00e7erlilik s\u00fcresi sona erdi\u011fi taktirde, kullan\u0131c\u0131y\u0131 login ekran\u0131na...<\/p>\n","protected":false},"author":1,"featured_media":3014,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4665],"tags":[4895,4666,4894,4893,3134],"class_list":["post-26411","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-openiddict","tag-offline_access","tag-openiddict","tag-openiddict-offline_access","tag-openiddict-refresh-token","tag-refresh-token"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/26411","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/comments?post=26411"}],"version-history":[{"count":5,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/26411\/revisions"}],"predecessor-version":[{"id":26417,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/26411\/revisions\/26417"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media\/3014"}],"wp:attachment":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media?parent=26411"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/categories?post=26411"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/tags?post=26411"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}