refresh_token is revoked

[stalno]

Hello.
I made my own app that updates listings stocks.
Its update every 3 hours from our wms system.
But after 2-3 days of working i received a message, that my refresh token is revoked.
Password nobody change, everything ok.
What the problem it can be?

[subash047]

Hello,
We are facing a similar issue. Some of our clients are facing the same issue of the refresh token is revoked.

@nateswart @capndesign
Can we have more details, on what cases Etsy store owners face the above issue while connected using a third-party Etsy app?

[Gareth064]

etsychristensen doesn't work for Etsy anymore, he left a couple of months ago. If you want help from Etsy Devs then you need to email them. They don't check this github much anymore. Kind Regards Gareth Doherty It’s nice to be important, But it’s more important to be nice.

…

________________________________ From: subash047 ***@***.***> Sent: 30 March 2023 08:27 To: etsy/open-api ***@***.***> Cc: Subscribed ***@***.***> Subject: Re: [etsy/open-api] refresh_token is revoked (Discussion #922) Hello, We are facing a similar issue. Some of our clients are facing the same issue of the refresh token is revoked. @etsyachristensen<https://gbr01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fetsyachristensen&data=05%7C01%7C%7Cf6699db1c9d644d434ec08db30f032b2%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638157580415529471%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=I03xktzlKOJwOWG9g2V3nJARMfnznrxOyfQv3sf5d0o%3D&reserved=0> Can we have more details, under what cases Etsy store owners face the above issue while connected using a third-party Etsy app? — Reply to this email directly, view it on GitHub<https://gbr01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fetsy%2Fopen-api%2Fdiscussions%2F922%23discussioncomment-5474361&data=05%7C01%7C%7Cf6699db1c9d644d434ec08db30f032b2%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638157580415529471%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=VpwO2QsJcMf6mYvUeWkf%2BhJGPS4fvXOPMzbkzjXJd5o%3D&reserved=0>, or unsubscribe<https://gbr01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAFKGDFZ52PICARGU5EF7CZLW6UYVPANCNFSM6AAAAAAV7WVWVQ&data=05%7C01%7C%7Cf6699db1c9d644d434ec08db30f032b2%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638157580415529471%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=WUi%2Bki5JLMlJB0f9SK4GlaT2dGPwY8ReAYyZSP1QyiI%3D&reserved=0>. You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[stalno]

I got it. I will.

[PMStanley]

@stalno If you get a response would you please share it here so others can reference this post if it ever happens to them

[emergingdzns]

When you fetch the ACCESS token it gives a new refresh token every time. Are you updating your local records with that new refresh token? Open Refresh Tokens expire after 90 days. So if you aren't updating your database with the latest refresh token, you're probably hitting the 90 day limit.

Just a guess.

[stalno]

No.
Before every stock update ( every 3 hours ), i request ACCESS token, store in db new refresh token, and than update stocks. Algorithm is rather clear.

[dave-shawley]

I've been facing a similar issue (see related discussion). It seems that if the response body contains some breadcrumbs. The variations that I have seen thus far are:

error	error_description	Suspected cause	Remediation
invalid_grant	refresh_token is revoked	User changed their Etsy password or otherwise revoked access to the application	Re-authorize application
invalid_token	access token is expired	Simple access token expiration	Refresh the token using the last refresh_token
invalid_token	access token is invalid	The access token is not valid	Try to refresh the token ... I never got to the bottom of this case

There was a GitHub issue that had more breadcrumbs but it was deleted when they migrated to discussions 😞

My implementation currently stores the access & refresh tokens on each refresh. Once I receive the refresh_token is revoked error, the OAuth 2 connection is no longer valid and needs to be re-established by the Etsy customer. Previous discussions about the refresh_token is revoked error were always connected to the Etsy customers password being changed or explicitly removing the applications connection to the store.

HTH