Method refresh_token

crates/chat-cli/src/auth/builder_id.rs:373–469

Refresh the access token

(
        &self,
        client: &Client,
        database: &Database,
        region: &Region,
        telemetry: Option<&crate::telemetry::TelemetryThread>,
    )

    /// Refresh the access token
    pub async fn refresh_token(
        &self,
        client: &Client,
        database: &Database,
        region: &Region,
        telemetry: Option<&crate::telemetry::TelemetryThread>,
    ) -> Result<Option<Self>, AuthError> {
        let Some(refresh_token) = &self.refresh_token else {
            warn!("no refresh token was found");
            // if the token is expired and has no refresh token, delete it
            if let Err(err) = self.delete(database).await {
                error!(?err, "Failed to delete builder id token");
            }

            return Ok(None);
        };

        trace!("loading device registration from secret store");
        let registration = match DeviceRegistration::load_from_secret_store(database, region).await? {
            Some(registration) if registration.oauth_flow == self.oauth_flow => registration,
            // If the OIDC client registration is for a different oauth flow or doesn't exist, then
            // we can't refresh the token.
            Some(registration) => {
                warn!(
                    "Unable to refresh token: Stored client registration has oauth flow: {:?} but current access token has oauth flow: {:?}",
                    registration.oauth_flow, self.oauth_flow
                );
                return Ok(None);
            },
            None => {
                warn!("Unable to refresh token: No registered client was found");
                return Ok(None);
            },
        };

        debug!("Refreshing access token");
        match client
            .create_token()
            .client_id(registration.client_id)
            .client_secret(registration.client_secret.0)
            .refresh_token(&refresh_token.0)
            .grant_type(REFRESH_GRANT_TYPE)
            .send()
            .await
        {
            Ok(output) => {
                let token: BuilderIdToken = Self::from_output(
                    output,
                    region.clone(),
                    self.start_url.clone(),
                    self.oauth_flow,
                    self.scopes.clone(),
                );
                debug!("Refreshed access token, new token: {:?}", token);

                if let Err(err) = token.save(database).await {
                    error!(?err, "Failed to store builder id access token");
                };