Function refreshOAuthToken

apps/sim/lib/oauth/oauth.ts:1515–1615

(
  providerId: string,
  refreshToken: string
)

const TOKEN_REFRESH_TIMEOUT_MS = 15_000

export async function refreshOAuthToken(
  providerId: string,
  refreshToken: string
): Promise<RefreshTokenResult> {
  try {
    const provider = getBaseProviderForService(providerId)

    const config = getProviderAuthConfig(provider)

    const { headers, bodyParams, useJsonBody } = buildAuthRequest(config, refreshToken)

    const response = await fetch(config.tokenEndpoint, {
      method: 'POST',
      headers,
      body: useJsonBody ? JSON.stringify(bodyParams) : new URLSearchParams(bodyParams).toString(),
      signal: AbortSignal.timeout(TOKEN_REFRESH_TIMEOUT_MS),
    })

    if (!response.ok) {
      const errorText = await response.text()
      let errorData: unknown = errorText

      try {
        errorData = JSON.parse(errorText)
      } catch (_e) {
        // Not JSON, keep as text
      }

      logger.error('Token refresh failed:', {
        status: response.status,
        statusText: response.statusText,
        error: errorText,
        parsedError: errorData,
        providerId,
        tokenEndpoint: config.tokenEndpoint,
        hasClientId: !!config.clientId,
        hasClientSecret: !!config.clientSecret,
        hasRefreshToken: !!refreshToken,
        refreshTokenPrefix: refreshToken ? `${refreshToken.substring(0, 10)}...` : 'none',
      })
      return {
        ok: false,
        errorCode: extractErrorCode(errorData),
        message: `Failed to refresh token: ${response.status} ${errorText}`,
      }
    }

    const data = await response.json()

    if (data && typeof data === 'object' && data.ok === false) {
      logger.error('Token refresh failed:', {
        status: response.status,
        statusText: response.statusText,
        error: data.error,
        parsedError: data,
        providerId,
        tokenEndpoint: config.tokenEndpoint,
        hasClientId: !!config.clientId,