-
Notifications
You must be signed in to change notification settings - Fork 1.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support automatic refreshing for expired OIDC tokens #2111
Comments
@eugene-krivobokov: Hi, Thanks a lot for your bug report. I'm not sure if our library supports this as of now. I think we should try to integrate it as it seems to be a very common use case. @oscerd @manusa @iocanel WDYT?? |
This issue has been automatically marked as stale because it has not had any activity since 90 days. It will be closed if no further activity occurs within 7 days. Thank you for your contributions! |
This is something that's impacting the Spark project. |
We will prioritize this in upcoming sprint |
Great, thank you :) |
- Added OIDCTokenRefreshInterceptor which would try to refresh token in case 401 is received. - OpenIDConnectionUtils would refresh token using two HTTP requests - first client tries to get OpenID provider discovery document at [[.issuer-url]]/.well-known/openid-configuration and gets token_endpoint - Then client does a POST request to token_endpoint with all the required parameters(refresh_token, client_id, client_secret etc)
- Added OIDCTokenRefreshInterceptor which would try to refresh token in case 401 is received. - OpenIDConnectionUtils would refresh token using two HTTP requests - first client tries to get OpenID provider discovery document at [[.issuer-url]]/.well-known/openid-configuration and gets token_endpoint - Then client does a POST request to token_endpoint with all the required parameters(refresh_token, client_id, client_secret etc)
Hi!
We use oidc authentication. Our code is running inside Gradle plugin.
I've found that id-token is not refreshing automatically.
To mitigate this I've reused this mechanism from the official kubernetes client:
https://github.com/avito-tech/avito-android/pull/297/files#diff-47071b3c0f7eebf84051f6b86e0558d9R55
Does the library support it?
The text was updated successfully, but these errors were encountered: