function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion
Jiten ShahJiten Shah 

How to store refresh token on Android mobile

Hello. In the User-Agent OAuth  flow --> a access token and refresh token are returned . How can I store refresh token in a secure fashion (I mean if the phone is rooted then the attacker can keep on using refresh token to gain unlimited access). 

 https://developer.salesforce.com/docs/atlas.en-us.api_rest.meta/api_rest/intro_understanding_user_agent_oauth_flow.htm 

Rahul KumarRahul Kumar (Salesforce Developers) 
Hi  Jiten Shah,

May I suggest you please refer the below link for reference. Best Regards
​Rahul Kumar