class

Authly::RefreshToken

Inherits Authly::GrantStrategy < Reference < Object

Patch: recover the resource-owner id embedded above so the refreshed access token gets a real sub (direct analog of the AuthorizationCode#user_id patch). The identity chains across refresh-of-refresh because each new refresh token re-embeds it.

Falls back to the legacy Doorkeeper bridge for refresh tokens issued by the Ruby service (opaque strings, not JWTs) so a client mid-session at cutover keeps its user identity.

Instance methods

user_id

Optional: Returns user_id for grants that authenticate users (e.g., password grant)

Source