Refresh token overwritten by NeedUpdatePassword in auth.go response

casdoor/controllers/auth.go

i am not able to get the refresh token as overwrites it resp.Data2 = user.NeedUpdatePassword

@proteinshake331 can you create a github issue?

so can track it there

I could simply do a commit so we will put both access token and refresh hash inside the data one object it will be the simplest solution without breaking anything else

does any sdk like casdoor-go-sdk use this API?

Will the SDK need change too？

Well i tried go sdk it don’t provide apis i have to figure out though the source code

I see RefreshOAuthToken API in SDK

So why not needUpdatePassword backoff?

needUpdatePassword backoff is a better solution

Sdk are very limited it don’t even support getting oAuth though password only though authorization_code

At first needUpdatePassword should not override refresh token at the very first place

You just need to create a github issue

So we can track it there

we will discuss and figure out it

well i dont' want to use the interface so i was integrating all apis in my own frontend and needed to get access token and refresh token the interface dont request only responseType- login

We don't need to do it here

Well, just create a github issue

https://github.com/casdoor/casdoor/issues/3930