Function refreshAccessToken

packages/core/sdk/src/oauth-helpers.ts:1333–1407

(
  input: RefreshAccessTokenInput,
)

};

export const refreshAccessToken = (
  input: RefreshAccessTokenInput,
): Effect.Effect<OAuth2TokenResponse, OAuth2Error> =>
  Effect.tryPromise({
    try: async () => {
      const as = asFromTokenUrlAndIssuer(input.tokenUrl, input.issuerUrl, {
        idTokenSigningAlgValuesSupported: input.idTokenSigningAlgValuesSupported,
        endpointUrlPolicy: input.endpointUrlPolicy,
      });
      const client: oauth.Client = { client_id: input.clientId };
      const clientAuth = pickClientAuth(
        input.clientSecret,
        input.clientAuth ?? DEFAULT_CLIENT_AUTH_METHOD,
      );
      const extraParams = new URLSearchParams();
      if (input.scopes && input.scopes.length > 0) {
        extraParams.set("scope", input.scopes.join(input.scopeSeparator ?? " "));
      }
      if (input.resource) {
        extraParams.set("resource", input.resource);
      }
      const additionalParameters =
        Array.from(extraParams.keys()).length > 0 ? extraParams : undefined;
      if (input.requestFormat === "json") {
        const response = await jsonTokenEndpointRequest({
          tokenUrl: input.tokenUrl,
          clientId: input.clientId,
          clientSecret: input.clientSecret,
          clientAuth: input.clientAuth ?? DEFAULT_CLIENT_AUTH_METHOD,
          grantType: "refresh_token",
          parameters: {
            refresh_token: input.refreshToken,
            ...(input.scopes && input.scopes.length > 0
              ? { scope: input.scopes.join(input.scopeSeparator ?? " ") }
              : {}),
            ...(input.resource ? { resource: input.resource } : {}),
          },
          timeoutMs: input.timeoutMs,
          endpointUrlPolicy: input.endpointUrlPolicy,
          fetch: input.fetch,
        });
        return await processTokenEndpointResponse(as, client, response);
      }
      const response = await oauth.refreshTokenGrantRequest(
        as,
        client,
        clientAuth,
        input.refreshToken,
        {
          ...oauth4webapiRequestOptions(
            input.tokenUrl,
            input.timeoutMs,
            input.endpointUrlPolicy,
            input.fetch,
          ),
          additionalParameters,
        },
      );