invalid_grant error

[Sid Bhatt]

hello, we are getting an error when using the refresh token. Appreciate the help. We sent this post a minute after authenticating the user, so the refresh token should not have expired.

POST:

https://authorization.cerner.com/tenants/ec2458f2-1e24-41c8-b71b-0e701af7583d/protocols/oauth2/profiles/smart-v1/token

Body:

grant_type=refresh_token

refresh_token=eyJp****

Headers:

Accept=application/json

Content-Type=application/x-www-form-urlencoded

Content-Length=75

Connection=close

Host=authorization.cerner.com

Response: 

{

"error": "invalid_grant",

"error_uri": "https://authorization.cerner.com/errors/urn%3Acerner%3Aerror%3Aauthorization-server%3Aoauth2%3Atoken%3Arefresh-token-invalid/instances/491e97e9-3784-4909-9c74-a1aa7c3d87bf?tenant=ec2458f2-1e24-41c8-b71b-0e701af7583d"

}

[Fenil Desani (Cerner)]

Hello,

Can you make sure you sent in the correct refresh token and not id_token or access_token?

Also, can you make sure, the actual value of refresh token is not being tampered with (added /removed characters/parameters) before sending in the request?

Thanks,

Fenil

[Sid Bhatt]

hi Fenil, 

Still no luck. Though getting a different error this time. 

Here is the setup we are using to refresh the access_token for an app with offline_access scope we created today...

POST:

https://authorization.cerner.com/tenants/ec2458f2-1e24-41c8-b71b-0e701af7583d/protocols/oauth2/profiles/smart-v1/token

Headers:

Authorization: Basic <Base64 encoded "clientid:secret"> 

Accept: application/json

Content-Type=application/x-www-form-urlencoded

Body (confirmed the refresh_token it is exactly as we receive it from Cerner):

grant_type=refresh_token

refresh_token=eyJp****

Response:

{"error":"invalid_client","error_uri":"https://authorization.cerner.com/errors/urn%3Acerner%3Aerror%3Aauthorization-server%3Aoauth2%3Atoken%3Ainvalid-authorization-header/instances/10555975-b28d-47b6-8024-3713fd4545d6?client=Basic&tenant=ec2458f2-1e24-41c8-b71b-0e701af7583d"}

Appreciate your help.

Thx,

Sid

[Sid Bhatt]

never mind I figured out the issue. thank you.