Problem/Motivation

client_credentials standard does not have refreshToken. Expired token is usually renew by requesting a new access token directly. There is no handling for expired access token in getClientCredentialsAccessToken(). This means expired token in client_credentials grant will not be renew automatically.

Proposed resolution

Add support for renewing expired token to getClientCredentialsAccessToken()

CommentFileSizeAuthor
#2 oauth2_client-add-support-for-renewing-token-for-client-credentials-grant-3064090-0.patch837 byteslongmtran

Comments

longmtran created an issue. See original summary.

longmtran’s picture

longmtran commented
StatusFileSize
new oauth2_client-add-support-for-renewing-token-for-client-credentials-grant-3064090-0.patch837 bytes

Attached patch adds token renewal support to getClientCredentialsAccessToken()

longmtran’s picture

longmtran commented
Status: Active » Needs review
ivan.chavarro’s picture

ivan.chavarro commented

Thank you, this patch solved my issue.

sfuchsbe’s picture

sfuchsbe commented

Works like a charm. Thank you

Myddna’s picture

Myddna commented

Could this patch be commited, please? :)

jumoke’s picture

jumoke commented

Works for me.

jumoke’s picture

jumoke commented
Status: Needs review » Reviewed & tested by the community
fathershawn’s picture

fathershawn
Primary language English
Location New York
commented

Hi! @perelesnyk and I have stepped up as maintainers, officially for D9 compatible and forward. I've added this issue to our planning issue. The Oauth2 standard has Refresh tokens as optional in general:

Issuing a refresh token is optional at the discretion of the authorization server. If the authorization server issues a refresh token, it is included when issuing an access token

https://tools.ietf.org/html/rfc6749#section-1.5

So if a refresh token is returned with the original access token, we should use it on all grant types

fathershawn’s picture

fathershawn
Primary language English
Location New York
commented
Status: Reviewed & tested by the community » Closed (duplicate)

Addressed in #3072062: Refactor Authorization Token Flow

fathershawn’s picture

fathershawn
Primary language English
Location New York
commented
Related issues: +#3072062: Refactor Authorization Token Flow