How do we get the refresh token through the APIs?

[agaonkar]

How do we get the refresh token through the APIs?

Currently to get the refresh token we need to go to the Shopify Partner login and generate a new refresh token. 

Can anyone please let me know how can we get it via postman/api?

[oscprofessional]

Hello agaonkar,
Please refer below link this will help you:

https://help.shopify.com/en/api/getting-started/authentication/oauth/api-credential-rotation#step-4-...

[Ryan]

There is no way to generate a refresh token through the API.  See the guide below on the full steps:

https://help.shopify.com/en/api/getting-started/authentication/oauth/api-credential-rotation#step-4-...

[transcend-dev]

Is this a feature that is upcoming?  It seems like it is a security flaw for users of OAuth2 applications to have to trust that the application they've authorized is going to have good credential hygiene. 

[KountTPA]

We have a need for generating a refresh token through an API. We need to be rotating credentials every 20 mins. It's just not feasible to have someone press a button and run a script every 20 mins.