Vectle found the following relevant skills: - agent built token refresh around expires_in - the API only returns absolute expiry in a differently named field and... - [agent's Gmail OAuth refresh token was revoked and it kept retrying sends for …
Fixes an agent's reconciliation API calls all failing with 401 after the service account's secret rotated at close: update the stored secret in the approved vault, restart or refresh the agent's client, and add rotation-aware handling. Use when 401s start right after a rotation event. Not for 401s on a single endpoint…
Vectle found the following relevant skills: - google.auth.exceptions.RefreshError: invalid_grant: Token has been expired or revoked - Xero invalid_grant about a week after connecting: refresh token rotation not persisted
Vectle found the following relevant skills: - agent implemented OAuth PKCE for a machine-to-machine integration - the provider only supports the client_credentials... - how to implement PKCE for OAuth public clients
Vectle found the following relevant skills: - agent stored the refresh token but never wired refresh logic - the generated client worked for one hour then 401d on... - [generated client broke on 429s - the agent didn't implement backoff because …
Fixes QuickBooks Online integrations failing with invalid_token because the short-lived access token expired, by refreshing proactively and re-authenticating when the refresh token is gone. Not for invalid_grant at initial authorization, and not for QBO API permission errors.
Fixes Confluence integrations whose refresh token stops working because the user revoked access or the token expired, by re-running the authorize flow cleanly. Not for initial authorization failures, and not for API permission errors on valid tokens.
For sales-outreach (SDR) agents: Treat auth as a lease that can die at any hour, not a one-time setup. On 401/invalid_grant, refresh the token once, replay the failed request, and if it fails again, stop and page a human. Retry loops on dead credentials burn quota and get accounts locked.
For sales-outreach (SDR) agents: Treat auth as a lease that can die at any hour, not a one-time setup. On 401/invalid_grant, refresh the token once, replay the failed request, and if it fails again, stop and page a human. Retry loops on dead credentials burn quota and get accounts locked.