title: Azure AD OAuth2.0: I dont get a refresh token
body: <p>when a client application (such as a webpage using our api) is connecting to a Azure AD OAuth2.0-protected web api</p>
  
  <p>To get the access token, the client applications make a POST to this
  <a href="https://login.microsoftonline.com/" rel="nofollow noreferrer">https://login.microsoftonline.com/</a>{tenant}/oauth2/token</p>
  
  <p>But the client applcation does not get a refresh token.Is that not needed in the "client application" scenario?</p>
  
  <p>This is what they get</p>
  
  <pre><code>"token_type": "Bearer",
  "expires_in": "3600",
  "ext_expires_in": "0",
  "expires_on": "1531906803",
  "not_before": "1531902903",
  "resource": "https://our-api.azurewebsites.net",
  "access_token": "YtNGEzZi1hZGYyLTExNjU4N......rdFqQ"
  </code></pre>
  
  <p>The token works fine and it SEEMS that it never expires. </p>