Refresh token using client credentials

[isaudalsaeed]

Hello everyone.

My use case is as follows.

1. request refresh token using client credentials. Returns refresh token
2. Use refresh token(without client credentials) to obtain access token.

From what I read: To validate a refresh token I need client credentials. That defeats my propose of not exposing the client credentials on every token generation.

Is there a way to implement my requirments?

Thank you