OAuth access token / refresh token behaviour

[IainOllerenshaw1]

I’ve just answered my own question (again)!

From:

https://developer.atlassian.com/cloud/jira/service-desk/oauth-2-authorization-code-grants-3lo-for-apps/

A refresh token can be returned with the access token in your initial authorization flow. To do this, add the offline_access scope to the scope parameter of the authorization URL.