somtoday-api-docs
somtoday-api-docs copied to clipboard
Invalid grant: Token revoked (HTTP error 403 ERR_BAD_REQUEST)
I managed to get my access_token and refresh_token using the steps needed for SSO authentication.
The access_token is valid for 1 hour, during which I can make requests without any issues.
However after that period things start to become a problem. Sometimes requesting a new access_token using the refresh_token works without any issues. However more often I get the error as described in the title.
I believe to have read somewhere that the refresh_tokens are valid for 30 days. However I can't find this anywhere anymore. Now it seems unlikely that the token has expired since I'm using it within 2-3 hours from the original request.
One other option could be that I'm accidentally using the refresh_token twice. Sometimes you seem to be able to use them twice, other times they're single use only?