Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

(Sorry, repost, there was no reply)
Hi. I would like to ask about Token Handling. AFAIK Kratos only stores the Access Token on registration. I would run a process refreshing the token for offline access. But when that fails at some point I don't see a way to get a new one through Kratos flows. That true? Did I miss something?

Hello <@U03E6NC2FPX>
apologies for the late answer,
You are asking about OIDC tokens right?
I am not sure about the fail, but currently you get a new token on registration and settings flow, there is an issue open to add a token refresh to the login flow <https://github.com/ory/kratos/issues/1912>
Let me know if that was what you were looking for.

Yup, it is. Guess I have to wait for that one.
Registration flow is a good hint, I could use that as fallback if refresh token fails.