Don't expose Refresh token to UI

[jeevasusej]

We should not expose refresh token to the UI. Right?

How would you handle it in right way?

https://auth0.com/blog/refresh-tokens-what-are-they-and-when-to-use-them/

[lurumad]

Hi @jeevasusej

It was not a good idea to create this project because at that moment we didn’t know the security concerns about ROPC flow and of course use refresh tokens in public clients.

I think we should remove this repo.

Regards!

/cc @CarlosLanderas