Glossary: Identity and Access Management

refresh token

Also written: refresh_token

A longer-lived token an app uses to get new access tokens without asking the person again. Revoking it ends the app's access, which is a key step after a compromise.