02-17-2023 11:43 PM
1. user logs in through my desktop app, both OAuth access and refresh tokens received and stored in files, everything works fine.
2. user revokes third-party access of my app here: https://accounts.ebay.com/acctsec/security-center/third-party-app-access
3. user runs my app again, but access token (read from file) remains valid for up to 2 hours (when it expires on its own) and can make API calls behalf of that user.
However, refreshing token is not possible, we get errors as I expected:
{"error":"invalid_grant","error_description":"the provided authorization refresh token is invalid or was issued to another client"}
I tried with a brand new Windows setup with a different internet connection, so web caching can't be a problem for sure at my side.
Any idea?