Invalid refresh token

[Muskan Paliwal]

Hi,

I am trying to get access_token using the refresh_token that I have received when a user authorises our Oauth consumer but for every user, I am getting a `Invalid refresh token` error and the oauth consumer hasn't been edited. 

Plus this is happening even after the user re-authorises the oauth consumer. 

[Mark C]

Hi @Muskan Paliwal,

Thank you for reaching out to the community.

When trying to generate a new access token using a refresh token, would it be possible for you to confirm if you're using the same client and secret keys?

Regards,
Mark C

[Muskan Paliwal]

Hi @Mark,

Yess, I am using the same client id and client secret. And I am still facing the issue. Any help would be appreciated.

[Mark C]

Hi @Muskan Paliwal,

Could you check if you can generate an access token using the below CURL commands?
First, try to generate a new access token:

curl -s -X POST -u "CLIENT_ID:SECRET" https://bitbucket.org/site/oauth2/access_token -d grant_type=client_credentials

After that, try to use the refresh token to generate a new access token.

curl -X POST -u "CLIENT_ID:SECRET" https://bitbucket.org/site/oauth2/access_token -d grant_type=refresh_token -d refresh_token=REFRESH_TOKEN_HERE

Let me know how it goes.

Regards,
Mark C