Method refreshMCPUserToken

coderd/mcp.go:1176–1231

parseMCPServerConfigID extracts the MCP server config UUID from the "mcpServer" path parameter. refreshMCPUserToken attempts to refresh an expired OAuth2 token for the given MCP server config. Returns true when the token is valid (either still fresh or successfully refreshed), false when the token i

(
	ctx context.Context,
	cfg database.MCPServerConfig,
	tok database.MCPServerUserToken,
	userID uuid.UUID,
)

// valid (either still fresh or successfully refreshed), false when
// the token is expired and cannot be refreshed.
func (api *API) refreshMCPUserToken(
	ctx context.Context,
	cfg database.MCPServerConfig,
	tok database.MCPServerUserToken,
	userID uuid.UUID,
) bool {
	if cfg.AuthType != "oauth2" {
		return true
	}
	if tok.RefreshToken == "" {
		// No refresh token — consider connected only if not
		// expired (or no expiry set).
		return !tok.Expiry.Valid || tok.Expiry.Time.After(time.Now())
	}

	result, err := mcpclient.RefreshOAuth2Token(ctx, cfg, tok)
	if err != nil {
		api.Logger.Warn(ctx, "failed to refresh MCP oauth2 token",
			slog.F("server_slug", cfg.Slug),
			slog.Error(err),
		)
		// Refresh failed — token is dead.
		return false
	}

	if result.Refreshed {
		var expiry sql.NullTime
		if !result.Expiry.IsZero() {
			expiry = sql.NullTime{Time: result.Expiry, Valid: true}
		}

		//nolint:gocritic // Need system-level write access to
		// persist the refreshed OAuth2 token.
		_, err = api.Database.UpsertMCPServerUserToken(
			dbauthz.AsSystemRestricted(ctx),
			database.UpsertMCPServerUserTokenParams{
				MCPServerConfigID: tok.MCPServerConfigID,
				UserID:            userID,
				AccessToken:       result.AccessToken,
				AccessTokenKeyID:  sql.NullString{},
				RefreshToken:      result.RefreshToken,
				RefreshTokenKeyID: sql.NullString{},
				TokenType:         result.TokenType,
				Expiry:            expiry,
			},
		)
		if err != nil {
			api.Logger.Warn(ctx, "failed to persist refreshed MCP oauth2 token",
				slog.F("server_slug", cfg.Slug),
				slog.Error(err),
			)
		}
	}

	return true
}

func parseMCPServerConfigID(rw http.ResponseWriter, r *http.Request) (uuid.UUID, bool) {