refresh token unexpected expiration

[stefanosalvucci]

Hello,
we've integrated V2 on our Saas (https://www.businessincloud.co/), and we're having the following issue:

• apparently the refresh token action works just for the first hours ( we're trying to refresh the token a day after the user connected FIC to our Saas), and we consistently receive this:
• • {"error"=>"invalid_token", "error_description"=>"The token is expired."}

We've stored on our end the following data:

<FattureInCloudIdentity:0x00007fb168c28a28
provider: "fatture_in_cloud",
uid: "9749XX",
created_at: Fri, 08 Jul 2022 16:25:55.435712000 CEST +02:00,
updated_at: Fri, 08 Jul 2022 16:25:55.435712000 CEST +02:00,
token:"a/eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJyZWYiOiJQeHNZZkpxTjhJQTOKENHIDDEN",
type: "FattureInCloudIdentity",
refresh_token:
"r/eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJyZWYiOiJlRVJXVElTOKENHIDDEN",
expires_at: Sun, 10 Jul 2022 12:49:10.741788000 CEST +02:00,
expires: nil>

To refresh the token we do a POST to https://api-v2.fattureincloud.it/oauth/token
with:

      {
        grant_type: "refresh_token",
        client_id: ENV['FATTURE_IN_CLOUD_V2_CLIENT'],
        client_secret: ENV['FATTURE_IN_CLOUD_V2_SECRET'],
        refresh_token: fic_identity.refresh_token
      }

last but not least, we just have tried to refresh a valid access token, and in this case it worked correctly.
I understand that we should be able to generate a new access token even if the current access token is expired, using the refresh token (that is valid for a year after last usage). But this is not working as expected. Any help is appreciated.

Have a nice day

[stefanosalvucci]

Hello, we've self fixed it.

We made a common module for handling all requests ti FIC and the issue was that we were sending in the header 'Authorization' => "Bearer #{identity.token}" also in the mentioned POST above.
That token was expired, causing that error.

We removed that from the header of the POST and now is working correctly.

One feedback: if the error mentioned above could be modified to:

• {"error"=>"invalid_token", "error_description"=>"The access token is expired."}

That would be helpful for new users having this issue.