Hootsuite supports the OAuth 2 Authorization Code Grant Specification and supports for refresh tokens. If refresh tokens are used, the refresh tokens must not expire. If refresh tokens are not used, access tokens must not expire.

The specified endpoints that must be implemented by the developer are outlined here: