Unable to refresh access token

Question

question

Victor Rungta asked Jan 22, '20 Jared Wood commented Mar 24, '20

Unable to refresh access token

App Type: Server/Web

curl Request:

curl --location --request POST 'https://platform.devtest.ringcentral.com/restapi/oauth/token' \

--header 'Content-Type: application/x-www-form-urlencoded' \

--header 'Authorization: Basic U0pDMTJQMDFQQVMwMHxBQUNxSkdJOW1pZDltYzhIRjJfMlVqTlY3di14WUZIYkFtR1Q2TlpVbjZzU3ZPc3JPdmRGVFJMNlpvWnZDbUJ6Q09oNF9QWWRPMEVYNENYQjd4dmJsWHJoWnlrSXJvM3ZieXM4RWFEc3FFZ0lVRzREa0NSelVRVTV6dGYyQVdWeWhkSDlvNHhLdlB3eUNNT010LVhJX1RjNE8zMXhJRzM5MnFPbFNYNVdFMnFwalllNFdjN0l2TS1rdTlJOFluRlpUZ09sdE16Q3JSMHJMbVI0TUZHVXNURDN8d2NJTW1BfDJNeTVtalRwZ1VtSEs1MjBIdG15M3d8QUE' \

--data-urlencode 'refresh_token=U0pDMTJQMDFQQVMwMHxBQUNxSkdJOW1pZDltYzhIRjJfMlVqTlY3di14WUZIYkFtR1Q2TlpVbjZzU3ZPc3JPdmRGVFJMNlpvWnZDbUJ6Q09oNF9QWWRPMEVYNENYQjd4dmJsWHJobjZBM3pZTEkyemc4RWFEc3FFZ0lVQ2V4dFY3WWpnMnN6dGYyQVdWeWhkSDlvNHhLdlB3eUNNT010LVhJX1RjNE8zMXhJRzM5MnFPbFNYNVdFMnFwalllNFdjN0l2TS1rdTlJOFluRlpUZ1BfUEhRQ3RxaUNGVVRsQjdtbG9uVXR8d2NJTW1BfHg0X2d1Wk1NcTdEWXFWc2lYbkVKTkF8QUE' \

--data-urlencode 'grant_type=refresh_token'

Response: 400 Bade Request

{

"error": "invalid_request",

"errors": [

{

"errorCode": "OAU-156",

"message": "Basic authentication header is missing or malformed"

}

],

"error_description": "Basic authentication header is missing or malformed"

}

Can you guys help me how to refresh access token.

authentication

1 |3000

Attachments: Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Using the RingCentral Phone for Desktop, you can dial or receive test calls, send and receive test SMS or Fax messages in your sandbox environment.

Download RingCentral Phone for Desktop:

Tip: switch to the "sandbox mode" before logging in the app:

On MacOS: press "fn + command + f2" keys
On Windows: press "Ctrl + F2" keys

Answer 1 · 2020-01-22T16:31:56Z

Phong Vu answered Jan 22, '20 Phong Vu edited Jan 22, '20

Your header is incorrect as you used the refresh token.

--header 'Authorization: Basic U0pDMTJQMDFQQVMwMHxBQUNxSkdJOW1pZDltYzhIRjJfMlVqTlY3di14WUZIYkFtR1Q2TlpVbjZzU3ZPc3JPdmRGVFJMNlpvWnZDbUJ6Q09oNF9QWWRPMEVYNENYQjd4dmJsWHJoWnlrSXJvM3ZieXM4RWFEc3FFZ0lVRzREa0NSelVRVTV6dGYyQVdWeWhkSDlvNHhLdlB3eUNNT010LVhJX1RjNE8zMXhJRzM5MnFPbFNYNVdFMnFwalllNFdjN0l2TS1rdTlJOFluRlpUZ09sdE16Q3JSMHJMbVI0TUZHVXNURDN8d2NJTW1BfDJNeTVtalRwZ1VtSEs1MjBIdG15M3d8QUE' \

The Authorization header must be a based64 encoded string of "client id" + ":" + " client secret"

1 |3000

Attachments: Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Answer 2 · 2020-01-22T19:36:41Z

Anirban answered Jan 22, '20 Jared Wood commented Mar 24, '20

url: https://platform.devtest.ringcentral.com/restapi/oauth/token (POST)

Your Header:

Content-Type: application/x-www-form-urlencoded

Authorization: Basic <Base 64 of client id : client secret>

In your post body:

grant_type=refresh_token&refresh_token=<refresh token>

3

1 |3000

Attachments: Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Phong Vu ♦♦ commented · Jan 22, 2020 at 07:39 PM

Incorrect!

To refresh a token you don't need to specify the username and password anymore!

0 ·

Anirban Phong Vu ♦♦ commented · Jan 22, 2020 at 07:50 PM

@Phong Vu .. just realized that ... corrected .. thanks

0 ·

Jared Wood Anirban commented · Mar 24, 2020 at 09:00 PM

This is exactly right. But does anyone know where it states this in the documentation? I've looked over every possible page and cannot come to this same conclusion on my own. Awful documentation.

1 ·

question