Authentication Refresh Failures

tony10

I have a 64-bit C# application running on Windows 10/11 that is making a successul initial request for the Authentication access_token. The URL for this request (and subsequent refresh) is https://api.refinitiv.com:443/auth/oauth2/v1/token. This access_token is successfully used in the WebSocket LogIn. After a prescribed interval (less than the "expires_in" seconds), the s/w requests a refresh of the access_token. The response sometimes is "OK", but unfortunately, many times the response is HTTP Status BadRequest RECEIVED: { "error": "invalid_grant"}. With this failure, the WebSocket disconnects. There can be upto six (6) successfult sequential "OK" refresh cycles, but out of the blue, there is arrives a failure.

Can anyone suggest the cause of the Authentication access_token refresh failure?

Jirapongse

@tony10

Sorry about the issue that you are facing.

According to the Limitations and Guidelines for the RDP Authentication Service article, typically, each account has only one active session (refresh token). A refresh token will be invalidated if other users use the same account with the password grant to get a new refresh and access token.

If you use the invalidated refresh token with the refresh grant to get a new access token, you will get the following error.

{
    "error": "invalid_grant"
}

In conclusion, the same account may be used by multiple users at the same time.

I hope that this information is of help