Forum Discussion

anagai's avatar
anagai
Occasional Contributor
4 years ago
Solved

Not automatically refreshing authorization access token

I have a test that retrieves authorization access token and I set it to automatically refresh after 1 second. Meaning I want it to to get access token for every time it is run. It is not refreshing t...
  • anagai's avatar
    anagai
    4 years ago

    To clarify, would be great if this auto token refresh feature worked when using the 'Client Credentials Grant' method of getting the token.

     

    I can make an step that gets access token from our authorization server and put into a testsuite custom property. All the request steps will then use this token for their Authorization headers. This is alot simpler.

anagai's avatar
anagai
Occasional Contributor

I am using OAuth 2 - Client Credentials Grant. I have the settings correct and is retrieving the token. There is no javascript. Not authenticating on any page. I simply want the getting of a new token on every test for now, because I just want to see if that auto refresh feature even works. I have seen some of the post regarding this. For now I just want an explanation exactly how this feature works. The option says Refresh Access Token: Automatic and I set the expire to 1 second. I am to conclude that when token expires it will automatically get a new token without me having me to click on get token. This does not seem to be happening. Is this how it is supposed to work? I could not find a really clear explanation on the documentation. Maybe you can point me to a place where I can understand this feature.

richie's avatar
richie
Community Hero
4 years ago
Hey anagai,

The reason i mentioned javascript is cos the readyapi! Help for OAuth v2.0's automation of token retrieval uses javascript to simulate interactions with a webpage to refresh the token. Im assuming its the same for SoapUI considering Smartbear havent developed a GUI method to do this....?

Have a look at the following link. This might help

https://support.smartbear.com/readyapi/docs/requests/auth/types/oauth2/automate/sample.html

Cheers,

Rich
  • anagai's avatar
    anagai
    Occasional Contributor
    4 years ago

    Ok, then this auto refresh feature is not going to work in this use case. I do not need to go to a page and refresh a token with javascript.

     

    Lets say I have 50 rest api requests in a test suite and each requires an access token. Before I run the suite I have to go into each step and click on that get token button to get a new token. This is highly inefficient If I have 50 steps in a suite. Would be awesome if there was an auto refresh feature that upon soup ui start will know tokens are expired and automatically retrieve tokens per api request step. After that point keep track if tokens need to be refreshed after set period of time.

    • anagai's avatar
      anagai
      Occasional Contributor
      4 years ago

      To clarify, would be great if this auto token refresh feature worked when using the 'Client Credentials Grant' method of getting the token.

       

      I can make an step that gets access token from our authorization server and put into a testsuite custom property. All the request steps will then use this token for their Authorization headers. This is alot simpler.

      • richie's avatar
        richie
        Community Hero
        4 years ago
        Hey anagai

        I have various different OAuth v2.0 projects in my workspace and some use the embedded OAuth functionality, others ive had to.setup the various back and forth REST requests and others are single REST call to generate the access token which i save to a Project property which is then called for each request as you describe. It just depends on the technical architecture. Obviously the single REST call to generate the access token is the most straighforward.

        You could submit a new feature request to Smartbear to add the auto refresh functionality to the embedded functionality. Im sure there would be no shortage of upvotes!

        Cheers

        Rich