Ory Hydra supports returning a refresh token in the Authorization Code flow. To obtain a refresh token, the client needs to request the

offline_access

scope during the initial token issuance. The

offline_access

scope indicates that the client needs a refresh token. Not all OAuth2 and OIDC flows support refresh tokens. For instance, the Implicit flow and Client credentials flow do not support refresh tokens. Here's a table that shows which flows support refresh tokens: | Flow | Supports Refresh Token | Required scope | Required response type | | --- | --- | --- | --- | | Authorization Code flow | Yes |

offline_access

|

code

| | Implicit flow | No | | | | Client credentials flow | No | | | For more details, you can refer to the [Ory documentation](https://www.ory.sh/docs/oauth2-oidc/refresh-token-grant#requirements-for-obtaining-a-refresh-token).