(self, token)
| 283 | return new_token |
| 284 | |
| 285 | def _refresh_access_token(self, token): |
| 286 | keys = ( |
| 287 | "refreshToken", |
| 288 | "clientId", |
| 289 | "clientSecret", |
| 290 | "registrationExpiresAt", |
| 291 | ) |
| 292 | missing_keys = [k for k in keys if k not in token] |
| 293 | if missing_keys: |
| 294 | msg = f"Unable to refresh SSO token: missing keys: {missing_keys}" |
| 295 | logger.info(msg) |
| 296 | return None |
| 297 | |
| 298 | expiry = dateutil.parser.parse(token["registrationExpiresAt"]) |
| 299 | if total_seconds(expiry - self._now()) <= 0: |
| 300 | logger.info(f"SSO token registration expired at {expiry}") |
| 301 | return None |
| 302 | |
| 303 | try: |
| 304 | return self._attempt_create_token(token) |
| 305 | except ClientError: |
| 306 | logger.warning("SSO token refresh attempt failed", exc_info=True) |
| 307 | return None |
| 308 | |
| 309 | def _refresher(self): |
| 310 | start_url = self._sso_config["sso_start_url"] |
no test coverage detected