in service/src/main/java/org/apache/fineract/cn/identity/rest/AuthorizationRestController.java [143:152]
private String getRefreshToken(final @Nullable String refreshTokenParam, final HttpServletRequest request) {
if (refreshTokenParam != null)
return refreshTokenParam;
final Cookie refreshTokenCookie = WebUtils.getCookie(request, TokenConstants.REFRESH_TOKEN_COOKIE_NAME);
if (refreshTokenCookie == null)
throw ServiceException.badRequest("One (and only one) refresh token cookie must be included in the request if the grant_type is refresh_token");
return refreshTokenCookie.getValue();
}