Why do I receive "refresh token provided is revoked" in my "refreshAccessTokens" request?

Developer Programs Support
1

The “access_token” has expired and the token has been reissued, but the following response is being received. In what cases do I receive “refresh token provided is revoked”?

“integrationDeleted” was not received from SmartThings, and the user is logging in.

        "body": {
            "headers": {
                "schema": "st-schema",
                "interactionType": "refreshAccessTokens",
                "requestId": "goqual-refresh-token",
                "version": "1.0"
            },
            "callbackAuthentication": {
                "clientId": "***",
                "clientSecret": "***",
                "grantType": "refresh_token",
                "refreshToken": "eyJhbGciOiJIUzM4NCJ9.ZjQxNzM3YzYtM2VhOC00YjdkLWE1NDAtODdjYjdiNWQ1ZDljOkhlaiBIb21lOmVmYWM2OTVlLWE4NjAtNGFjNi04ZDI4LTM1ZmIwZTBkNGJmNDp2aXBlcl83YTRlMzM2MC05NjhhLTExZWEtOWVmOC0wNWJhNWY2NzJjN2M.TJkcyuwy2f7gs6h9P_ghh39uryIZ9aU3rBHsE5lYT5-2_M7inHNiFa-mGexp-w3s"
            }
        }```



    "body": {
        "headers": {
            "schema": "st-schema",
            "interactionType": "refreshAccessTokens",
            "requestId": "goqual-refresh-token",
            "version": "1.0"
        },
        "globalError": {
            "errorEnum": "INVALID-TOKEN",
            "detail": "refresh token provided is revoked"
        }
    }
2

Hi @SW11 Welcome to SmartThings Community

the refreshToken is changed when the schema is deleted, in this case, if the integration was not deleted we need to check the logs, if you know the date/time and the timezone when it happened we can check in the logs to investigate and AppId :saluting_face:

3

You’re right. The integration has not been deleted.

date time : 2023-09-18 10:00:11.247 (asia/seoul)
AppId : viper_7a4e3360-968a-11ea-9ef8-05ba5f672c7c

        "body": {
            "headers": {
                "schema": "st-schema",
                "interactionType": "refreshAccessTokens",
                "requestId": "goqual-refresh-token",
                "version": "1.0"
            },
            "callbackAuthentication": {
                "clientId": "1cf96d02-***-***-***-717bace677a8",
                "clientSecret": "***",
                "grantType": "refresh_token",
                "refreshToken": "eyJhbGciOiJIUzM4NCJ9.ZWQzMGI5Y2MtOTJkYy00YjMzLWE2ZjQtNzk0NzY2NjdiNzNhOkhlaiBIb21lOjczMjVhOWExLTZlNGItNDQ0Zi04NDdkLTk2MzIzOWEzYThiMzp2aXBlcl83YTRlMzM2MC05NjhhLTExZWEtOWVmOC0wNWJhNWY2NzJjN2M.q_Hm4CbmT060PIA8LUBvnqtl1pRlnqOIHYG0g5CzXXT3Y3PSo-MfP9ibiG5zsuhC"
            }
        }

    "response": {
        "headers": {
            "X-Cache": [
                "Error from cloudfront"
            ],
            "x-amz-apigw-id": [
                "LbYcTHt9tjMFrZA="
            ],
            "X-Amz-Cf-Pop": [
                "ICN54-C1"
            ],
            "Connection": [
                "keep-alive"
            ],
            "x-amzn-RequestId": [
                "040b6bda-94dd-4dc1-bce0-a0a0cfd2efd7"
            ],
            "X-Amz-Cf-Id": [
                "_mbhMhrvJHc58lPNp188P5p11wZ1earwL7iB4psE2SlhFBfP_OllAQ=="
            ],
            "Content-Length": [
                "214"
            ],
            "Date": [
                "Mon, 18 Sep 2023 01:00:11 GMT"
            ],
            "X-Amzn-Trace-Id": [
                "Root=1-6507a11b-0b785ae655db8af747176410;Sampled=0;lineage=5d8150ad:0"
            ],
            "Content-Type": [
                "application/json"
            ],
            "Via": [
                "1.1 2697d1744a14136c20f2b578c5831cc8.cloudfront.net (CloudFront)"
            ]
        },
        "body": {
            "headers": {
                "schema": "st-schema",
                "interactionType": "refreshAccessTokens",
                "requestId": "goqual-refresh-token",
                "version": "1.0"
            },
            "globalError": {
                "errorEnum": "INVALID-TOKEN",
                "detail": "refresh token provided is revoked"
            }
        },
        "status": "401 UNAUTHORIZED"
    }
4

Thanks @SW11 let me some time to check it with the corresponding team