proactively refresh bearer for threaded task

[soxofaan]

for

• threaded tasks in job manager: support auto-refresh of auth token #817

[soxofaan]

@VictorVerhaert @HansVRP Not that you have to review this PR in full, but it would be great if you could verify that this feature branch fixes the problem of the EUGW use case from #817

[HansVRP]

vincent is on holiday, however @VincentVerelst also ran into this issue.

@VincentVerelst could you test to see if this issue is resolved now?

[VincentVerelst]

I've only encountered this problem after several hours of processing. @soxofaan, is there a way to force the refresh token to expire sooner, to make this test less expensive?

[soxofaan]

is there a way to force the refresh token to expire sooner, to make this test less expensive?

No not really, we don't have much control over that on practical deployments.
I did quick check on CDSE prod and there access tokens seem to have TTL of around 8 hour. But @VictorVerhaert 's screenshot of #817 seems to suggest there is a TTL of order of 10 minutes, so I'm not sure what authentication details are in place there (which OIDC provider, which auth mechanism, ...)

[VincentVerelst]

8 hours is indeed exactly the interval at which I encountered this problem. I anyway need to reprocess some jobs for a project. I'm running those jobs now on this branch. Will keep you posted!

[VincentVerelst]

Good news, the jobs have been running all night without interruption now

[soxofaan]

ok thanks for the follow up. I'm going to merge this