cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

User OAuth access token remains valid after revoking on ebay.com at "Third-party app access"

1. user logs in through my desktop app, both OAuth access and refresh tokens received and stored in files, everything works fine.

 

2. user revokes third-party access of my app here: https://accounts.ebay.com/acctsec/security-center/third-party-app-access

 

3. user runs my app again, but access token (read from file) remains valid for up to 2 hours (when it expires on its own) and can make API calls behalf of that user.

 

However, refreshing token is not possible, we get errors as I expected:

{"error":"invalid_grant","error_description":"the provided authorization refresh token is invalid or was issued to another client"}

 

I tried with a brand new Windows setup with a different internet connection, so web caching can't be a problem for sure at my side.

 

Any idea?

Message 1 of 1
latest reply
0 REPLIES 0