Pass bouncer.refresh_token as well as bouncer.token.

[recurser]

Passes bouncer.refresh_token from heroku-oauth so that fresh tokens can be obtained in the future.

[wuputah]

Thanks Dave. I purposely did not include refresh tokens for security reasons, but since this is behind expose_token I think it's okay to include refresh tokens.

cc/ @rhyselsmore do you see any issues here?

[recurser]

Hi @wuputah,

I purposely did not include refresh tokens for security reasons, but since this is behind expose_token I think it's okay to include refresh tokens.

I could put it behind something like expose_refresh_token if you'd prefer, so it needs to be explicitly opted-into?

[recurser]

Hi @wuputah / @rhyselsmore - any further thoughts on this?

[wuputah]