无法刷新访问令牌。请重新验证

Question

我在刷新访问令牌时得到这个错误：访问令牌无法刷新。请重新验证

这一错误此前曾在2017年4月报告过。OneLogin文档声明刷新令牌可以使用45天左右。我的刷新令牌已经有20个小时了。是文档正确还是刷新令牌的寿命更短？我可以做获取访问令牌和撤销令牌罚款。

public RootObject RefreshToken（HttpRequesterDM rDM）{restsharp.deserializers.jsondeserializer deserial=new restsharp.deserializer（）；var client=new RestClient（“https://api.us.onelogin.com/auth/oauth2/token”）；var request=new RestRequest（method.post）；string clientAuth=$“client_id：{rDM.clientid},client_secret：{rDM.clientsecret}”；string

        request.AddParameter("application/json", "{\n\"access_token\":\" + accessToken + \"\n}", ParameterType.RequestBody);
        request.AddParameter("application/json", "{\n\"refresh_token\":\" + refreshToken + \"\n}", ParameterType.RequestBody);
        IRestResponse response = client.Execute(request);

        RootObject returnData = deserial.Deserialize<RootObject>(response);
        if (returnData.status.message == "Access token cannot be refreshed. Please re-authenticate")
        {
            RootObject rObject = GetToken(rDM);
            return rObject;
        }
        if (returnData.data[0].access_token != null)
        {
            access = returnData.data[0].access_token; //This correctly gets the Access Token. You should return this to a class variable so that all the  other functions can access it easily and you're not constantly passing along the variable through them.

        }
        return returnData;

Answer 1

刷新令牌可以过期、吊销或拒绝。由于OneLogin是一个SSO，用户可能已经注销了他们的身份提供程序，从而使刷新令牌失效。您将需要设计您的软件来处理错误和边缘情况。错误信息是清楚的，您的用户必须再次进行身份验证。在您的代码中没有什么要做/更改/更正的，除非您正在发送一个无效/错误的刷新令牌。