I agree but the current tricky thing in the implementation of the refresh token in Doorkeeper is that it seems to be the same token as access token. (correct me if I'm wrong) https://github.com/applicake/doorkeeper/blob/master/lib/generators/doorkeeper/templates/migration.rb#L30