refresh token

[pawanvirsingh]

what is the inbuilt url for genrating acces_token from refresh token in this package.

how can i generate a fresh access token from my old refresh token is there any url available or i have to make it custom.

[jleclanche]

See #351

[phillbaker]

To clarify, a request to the generic tokens endpoint like (following the example):

curl -X POST -d "grant_type=refresh_token&client_id=<client_id>&refresh_token=<refresh_token>"  http://localhost:8000/o/token/

should return a new access token for apps created the public client type. For private client apps, the client id/secret will likely need to be provided in the basic auth header.

[joelranjithjebanesan7]

this command shows invalid client error...anything else

[joelranjithjebanesan7]

I had generated new token and tried, it works.This may be using old token instead of generating new one

…

On Sun, Apr 8, 2018 at 11:36 AM, Pharrell ***@***.***> wrote: @joelranjithjebanesan7 <https://github.com/joelranjithjebanesan7> yes, same here. {"error": "invalid_grant"}% Any clues to solve this problem? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#432 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/Ab5KRMHgcG0yRq2ZjKh8ZIlzLUoM3gEMks5tmajngaJpZM4K-5g7> .

[sachin87]

@phillbaker @pawanvirsingh I am getting
{
"error": "invalid_grant"
}
in response, what's wrong with my request.

[oma0256]

@sachin87 check to verify that you set your details correctly. For instance in my case my client_id was wrong.

[proteusvacuum]

You may have already solved this @sachin87 , but I came across this issue recently.
The

{ "error": "invalid_grant" } 

message is returned if the refresh_token you are using has been revoked or previously used.

This message is raised in oauthlib here:

https://github.com/oauthlib/oauthlib/blob/d54965b86ce4ede956db70baff0b3d5e9182a007/oauthlib/oauth2/rfc6749/grant_types/refresh_token.py#L113-L117

And is caused when django-oauth-toolkit returns False here:

django-oauth-toolkit/oauth2_provider/oauth2_validators.py

Lines 697 to 707 in 9d2aac2

	null_or_recent = Q(revoked__isnull=True) | Q(
	revoked__gt=timezone.now() - timedelta(seconds=oauth2_settings.REFRESH_TOKEN_GRACE_PERIOD_SECONDS)
	)
	rt = (
	RefreshToken.objects.filter(null_or_recent, token=refresh_token)
	.select_related("access_token")
	.first()
	)
	if not rt:
	return False

It's a bit of a confusing error message for that outcome.