bangumi / bangumi/api

refresh_token刷新失败

Open
#203 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
HTML
Stars
1.2k
Forks
41
PR merge metrics
No merged PRs in 30d

Description

token为同接口authorization_code获取,token能获取收藏及NSFW内容。
测试了是否包含Authorization,同样报错。
测试了是否包含state字段(获取授权时state未保存,此处填写的0),同样报错。
未测试过期token的情况,是此接口仅能刷新过期token嘛?

请求:
```
POST https://bgm.tv/oauth/access_token

header额外包含:User-Agent,Authorization

{"client_id":"bgm******","client_secret":"******","grant_type":"refresh_token","redirect_uri":"https://******","refresh_token":"******"}
```

返回:
`{"error":"invalid_grant","error_description":"Invalid refresh token"}`

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by tracing the POST /oauth/access_token endpoint and its refresh_token grant handling. Reproduce the request described in the issue and inspect how invalid_grant is produced for a token obtained through authorization_code. Done means determining whether the reported refresh-token use is supported and documenting or correcting the behavior.

Written by the indexing model from the issue text.

Assessment

Domain
api, authentication
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.