{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2702","repository_url":"https://api.github.com/repos/IdentityServer/IdentityServer3","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2702/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2702/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2702/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/2702","id":140417955,"number":2702,"title":"Asp.net MVC  implicit flow, calling web api with expired Access_token ","user":{"login":"iBoonz","id":2930374,"avatar_url":"https://avatars.githubusercontent.com/u/2930374?v=3","gravatar_id":"","url":"https://api.github.com/users/iBoonz","html_url":"https://github.com/iBoonz","followers_url":"https://api.github.com/users/iBoonz/followers","following_url":"https://api.github.com/users/iBoonz/following{/other_user}","gists_url":"https://api.github.com/users/iBoonz/gists{/gist_id}","starred_url":"https://api.github.com/users/iBoonz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iBoonz/subscriptions","organizations_url":"https://api.github.com/users/iBoonz/orgs","repos_url":"https://api.github.com/users/iBoonz/repos","events_url":"https://api.github.com/users/iBoonz/events{/privacy}","received_events_url":"https://api.github.com/users/iBoonz/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2016-03-12T21:22:10Z","updated_at":"2016-03-13T09:36:17Z","closed_at":null,"body":"Hi,\r\n\r\nI currently have a client that uses Implicit flow as authentication, and this client gets his data via another Web API that is secured with UdentityServerBearerTokenAuthentication, everything works, but when the timeout exeeds of the Acces_token I get a 401 when I fetch my data via a HttpClient. \r\n\r\nHow should I handle this 401? Refresh tokens are not used with implicit flow, so should I expand the lifetime of the access token? \r\n\r\nThanks for the info :)"},"comment":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/comments/195921799","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/2702#issuecomment-195921799","issue_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2702","id":195921799,"user":{"login":"iBoonz","id":2930374,"avatar_url":"https://avatars.githubusercontent.com/u/2930374?v=3","gravatar_id":"","url":"https://api.github.com/users/iBoonz","html_url":"https://github.com/iBoonz","followers_url":"https://api.github.com/users/iBoonz/followers","following_url":"https://api.github.com/users/iBoonz/following{/other_user}","gists_url":"https://api.github.com/users/iBoonz/gists{/gist_id}","starred_url":"https://api.github.com/users/iBoonz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iBoonz/subscriptions","organizations_url":"https://api.github.com/users/iBoonz/orgs","repos_url":"https://api.github.com/users/iBoonz/repos","events_url":"https://api.github.com/users/iBoonz/events{/privacy}","received_events_url":"https://api.github.com/users/iBoonz/received_events","type":"User","site_admin":false},"created_at":"2016-03-13T09:36:17Z","updated_at":"2016-03-13T09:36:17Z","body":"Always from the server\r\n\r\n- The user logs into the MVC application\r\n- The MVC client makes the REST calls to the API client with the BEARER token of the user\r\n"}}