Function refreshTokens

packages/cli/src/auth/oauth.ts:173–206

(
  refresh_token: string,
  opts: RefreshOptions = {},
)

}

export async function refreshTokens(
  refresh_token: string,
  opts: RefreshOptions = {},
): Promise<OAuthTokens> {
  const clientId = resolveClientId();
  const fetchImpl = opts.fetchImpl ?? fetch;
  const body = new URLSearchParams({
    grant_type: "refresh_token",
    refresh_token,
    client_id: clientId,
  });

  const res = await fetchImpl(tokenEndpoint(), {
    method: "POST",
    headers: {
      "content-type": "application/x-www-form-urlencoded",
      accept: "application/json",
    },
    body: body.toString(),
  });

  if (res.status === 400 || res.status === 401) {
    throw ErrRefreshFailed(await safeText(res));
  }
  if (!res.ok) {
    throw ErrApi(res.status, (await safeText(res)) || res.statusText);
  }

  const payload = await readJsonOrThrow(res);
  const tokens = parseTokenResponse(payload);
  // Refresh grant → preserve a refresh_token the server didn't rotate.
  await persistOAuth(tokens, { preserveMissing: true });
  return tokens;
}

export interface RevokeOptions extends RefreshOptions {
  /** Hint to the server about which token we're sending (RFC 7009). */