Function refreshAccessToken

packages/core/sdk/src/oauth-helpers.ts:1378–1483

(
  input: RefreshAccessTokenInput,
)

};

export const refreshAccessToken = (
  input: RefreshAccessTokenInput,
): Effect.Effect<OAuth2TokenResponse, OAuth2Error> => {
  const requestedScopes = input.scopes && input.scopes.length > 0 ? input.scopes : undefined;
  const scopeParameter = (scopes: readonly string[] | undefined): string | undefined =>
    scopes === undefined ? undefined : scopes.join(input.scopeSeparator ?? " ");

  const attempt = (
    scopes: readonly string[] | undefined,
  ): Effect.Effect<OAuth2TokenResponse, OAuth2Error> =>
    Effect.tryPromise({
      try: async () => {
        const as = asFromTokenUrlAndIssuer(input.tokenUrl, input.issuerUrl, {
          idTokenSigningAlgValuesSupported: input.idTokenSigningAlgValuesSupported,
          endpointUrlPolicy: input.endpointUrlPolicy,
        });
        const client: oauth.Client = { client_id: input.clientId };
        const clientAuth = pickClientAuth(
          input.clientSecret,
          input.clientAuth ?? DEFAULT_CLIENT_AUTH_METHOD,
        );
        const scope = scopeParameter(scopes);
        const extraParams = new URLSearchParams();
        if (scope !== undefined) {
          extraParams.set("scope", scope);
        }
        if (input.resource) {
          extraParams.set("resource", input.resource);
        }
        const additionalParameters =
          Array.from(extraParams.keys()).length > 0 ? extraParams : undefined;
        if (input.requestFormat === "json") {
          const response = await jsonTokenEndpointRequest({
            tokenUrl: input.tokenUrl,
            clientId: input.clientId,
            clientSecret: input.clientSecret,
            clientAuth: input.clientAuth ?? DEFAULT_CLIENT_AUTH_METHOD,
            grantType: "refresh_token",
            parameters: {
              refresh_token: input.refreshToken,
              ...(scope !== undefined ? { scope } : {}),
              ...(input.resource ? { resource: input.resource } : {}),
            },
            timeoutMs: input.timeoutMs,
            endpointUrlPolicy: input.endpointUrlPolicy,
            fetch: input.fetch,
          });
          return await processTokenEndpointResponse(as, client, response);
        }
        const response = await oauth.refreshTokenGrantRequest(
          as,
          client,
          clientAuth,
          input.refreshToken,
          {
            ...oauth4webapiRequestOptions(
              input.tokenUrl,
              input.timeoutMs,