Hello,
I am trying to clarify the token usage for the REST API. I am using controller version 2.2.1
The /v1/oauth/login endpoint returns a access_token and a refresh_token. The doc's say that the validity of the access_token is 1 week, and that the refresh_token should be used to generate a new access_token upon it's expiry.
The /v1/oauth/refresh endpoint is said to return a refresh_token, though it looks like it returns an access_token. Valid for 60 days.
If the refresh endpoint does indeed return a access_token, then that would follow the logic presented in the login documentation. But then, what about the refresh_token? After the 60 days, should you use Basic Auth again to retrieve tokens?
