UiPath / uipathcli / 15017548364

91%

main: 91%

push

github

Add support for refresh tokens

The CLI makes the user go through the oauth login authorization flow every
time the access token expired. The access tokens are short-lived and
expiration is currently set to 1 hour which requires the user to
re-login almost every time they are using the CLI.

Taking advantage of the refresh token support in the Identity Server to
automatically renew access tokens for the user. If there is a valid
refresh token, there is no action required by the user.

In case the refresh token expired or the renewal of the access token
fails for any other reason, the user is required to login again.

Implementation:

- Automatically adding the offline_access scope during the oauth flow so
  that the Identity Server returns a refresh token.

- Caching the refresh token using the cache package similar to access
  tokens.

- Added new configuration parameter `offlineAccess` to disable refresh
  token support, e.g.

```
- name: default
  organization: <your-org>
  tenant: defaulttenant
  auth:
    offlineAccess: false
```

- Extended debug logging to log identity server requests and responses
  as well as detailed log messages for refresh token and access token
  handling. Redacting the client secret and refresh tokens to avoid them
  being accidentally leaked

Implements https://github.com/UiPath/uipathcli/issues/193

241 of 247 new or added lines in 10 files covered. (97.57%)

6653 of 7330 relevant lines covered (90.76%)

1.02 hits per line