Onedrive token revoked within 90 days

[landall]

I have met a thread in the forum about onedrive token revoking.
https://forum.rclone.org/t/onedrive-token-keeps-getting-revoked/15479/9

The refresh token of onedrive dies in about 90 days. So if someone do not use an onedrive token for more than 90 days, he may get an error of invalid_grant.

It is very annoying to delete this account and reauthorize it in rclone.

Maybe we should add some way to refresh all of the onedrive tokens regularly.

[darthShadow]

What do you think should be done if rclone is not using the remote for more than 90 days?

[ncw]

It is very annoying to delete this account and reauthorize it in rclone.

You don't have to do that. Just run

rclone config reconnect remote:

[landall]

What do you think should be done if rclone is not using the remote for more than 90 days?

I think it should be a document modification.
Renewing the tokens is not the duty of rclone.

Not many users know this thing. They think rclone should renew the token when they use it next time.

maybe we need a hint about how to setup a schedule task to avoid the expiry of Onedrive tokens.

[ncw]

The refresh token of onedrive dies in about 90 days. So if someone do not use an onedrive token for more than 90 days, he may get an error of invalid_grant.

Where is that documented? I don't see this for either my onedrive personal or onedrive business account?

Every time rclone does a token refresh it should get a new refresh token. If you don't use the backend at all for 90 days it might expire I suppose - is that what you are seeing?

[landall]

The refresh token of onedrive dies in about 90 days. So if someone do not use an onedrive token for more than 90 days, he may get an error of invalid_grant.

Where is that documented? I don't see this for either my onedrive personal or onedrive business account?

Every time rclone does a token refresh it should get a new refresh token. If you don't use the backend at all for 90 days it might expire I suppose - is that what you are seeing?

https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-configurable-token-lifetimes

Just search “Refresh Token Max Inactive Time”

It is not part of onedrive but active directory.
And it is widely reported that the refresh token will be expired.
for example:
https://www.microsoftpartnercommunity.com/t5/Multi-Factor-Authentication-MFA/OAuth-Refresh-token-has-expired-after-90-days/td-p/9200
https://github.com/microsoftgraph/microsoft-graph-docs-contrib/issues/8339
https://stackoverflow.com/questions/44101568/microsoft-graph-api-refresh-token-expired

[ncw]

I'm not sure what to suggest other than adding some stuff to the docs?

If you don't run rclone for 90 days then yes, the refresh token will time out. However nearly all the cloud providers are like that.

[landall]

I think a suggestion in the docs and the view of adding a new Onedrive account is enough?
I will create a scheduled task to run rclone and use these tokens every month but I think it is not the duty of rclone.

[landall]

It is counterintuitive that a refresh token is not immortal.

[ncw]

OK I've put a note in the docs about this and how to refresh the token.

Thanks for bringing this up.