Skip to main content

Token Refresh on Expiry in OAuth 2 Client Credential Flow

· One min read

We've updated our SDKs that use OAuth 2 Client Credential Flow to enable automatic re-authorization of the client when the OAuth token is expired.

Details

Previously, our SDK behavior was such that if the OAuth token was not set and the user attempted to make an API call, the SDK would automatically get an OAuth token before making the actual API call.

Now, this behavior has been extended to expired OAuth tokens as well. If an API sends the expires_in property in the OAuth token, the SDK will check the expiry before the user's API calls to make sure the token is still valid. If the token is found to have expired, the SDK will attempt to get a new token and then make the actual API call.