Function get_access_token

codecarbon/cli/auth.py:193–226

Return a valid access token, refreshing or failing with a clear message.

()

def get_access_token() -> str:
    """Return a valid access token, refreshing or failing with a clear message."""
    try:
        creds = _load_credentials()
    except Exception as e:
        raise ValueError(
            "Not able to retrieve the access token, "
            f"please run `codecarbon login` first! (error: {e})"
        )

    access_token = creds.get("access_token")
    if not access_token:
        raise ValueError("No access token found. Please run `codecarbon login` first.")

    # Fast path: token is still valid for the current OIDC provider
    if _validate_access_token(access_token):
        return access_token

    # Token is expired or was issued by a different provider — try refresh
    refresh_token = creds.get("refresh_token")
    if refresh_token:
        try:
            new_tokens = _refresh_tokens(refresh_token)
            _save_credentials(new_tokens)
            return new_tokens["access_token"]
        except Exception:
            pass

    # Refresh failed — credentials are stale (e.g. auth provider migrated)
    _CREDENTIALS_FILE.unlink(missing_ok=True)
    raise ValueError(
        "Your session has expired or the authentication provider has changed. "
        "Please run `codecarbon login` again."
    )


def get_id_token() -> str: