Expired access token with no call to refresh

Question

question

DerekC asked · Oct 18, 2017 at 09:52 PM

Expired access token with no call to refresh

Our access token expires within 24 hours. Alexa doesn't seem to be making a call to the refresh token for our Smart Home Skill. I've verified the message we are sending back validates against the V3 JSON schema and it's included below. What are we doing wrong here? If I disable/re-enable it will work again for 24 hours. Any help is greatly appreciated.

This was copied directly from CloudWatch:

{
    "event": {
        "header": {
            "name": "ErrorResponse",
            "messageId": "942b119a-fa5c-4de2-af39-cc2c9eea2b6d",
            "namespace": "Alexa",
            "payloadVersion": "3"
        },
        "payload": {
            "type": "EXPIRED_AUTHORIZATION_CREDENTIAL",
            "message": "The access token is expired"
        }
    }
}

alexa smart home account linking

1

10 |2000 characters needed characters left characters exceeded

Attachments: Up to 2 attachments (including images) can be used with a maximum of 524.3 kB each and 1.0 MB total.

4 Answers

Answer 1 · 2018-06-27T23:53:34Z

iotas answered · Jun 27, 2018 at 11:53 PM

I'm running into the same issue. When I return an error to Alexa of type `EXPIRED_AUTHORIZATION_CREDENTIAL` I would expect Alexa to use the refresh token in the background and make the call again with a valid token. In practice I'm not seeing any further calls after I return the error message, and the old expired token is still used for future calls.

I know the refresh token is working, because Alexa is getting a new one when its time expires, just not when I return an error explicitly saying it has expired.

0 · Share

10 |2000 characters needed characters left characters exceeded

Attachments: Up to 2 attachments (including images) can be used with a maximum of 524.3 kB each and 1.0 MB total.

Answer 2 · 2017-10-25T20:15:59Z

DerekC answered · Oct 25, 2017 at 08:15 PM

I believe this has been partially resolved. I found we were not sending the "expires_in" field in the token response. Initial testing seems to work after sending that field and letting the expiration time elapse.

However, it seems that explicitly sending an EXPIRED_AUTHORIZATION_CREDENTIAL ErrorResponse back should trigger the refresh request from Alexa. Instead discovery requests were continuing to be sent every few hours, and returning the ErrorResponse each time.

1 · Share

10 |2000 characters needed characters left characters exceeded

Attachments: Up to 2 attachments (including images) can be used with a maximum of 524.3 kB each and 1.0 MB total.

Answer 3 · 2017-10-19T14:26:40Z

DerekC answered · Oct 19, 2017 at 02:26 PM

Here's the access and refresh token we sent

{
    "access_token": "Ij97-gQxa5O3Dang_0K4-og4-0hkN4Ka0-Ip4IjB24MaRbr-gDn1x9yHvGXpOGGxc0bF7NKnnekf3pTq3jsdKVKQkJcVnAmZp72MiTtOdFqgzbVI2xErdKFF1EqZ8IE87ZiRg-TyvaN0GJGA_86O-HuxSog8bxdpOCagz2t4V2pHD8P4Nd82_Zl_3zd7sGOSSZJSfXjJwcJwm6DUBfIP418fdtbbDHSamkORzYpCYdagwum011pMHZT4YfE",
    "refresh_token": "1698448349396308492"
}

And here's the discover message that triggered the expiration:

{
    "directive": {
        "header": {
            "namespace": "Alexa.Discovery",
            "name": "Discover",
            "payloadVersion": "3",
            "messageId": "942b119a-fa5c-4de2-af39-cc2c9eea2b6d"
        },
        "payload": {
            "scope": {
                "type": "BearerToken",
                "token": "Ij97-gQxa5O3Dang_0K4-og4-0hkN4Ka0-Ip4IjB24MaRbr-gDn1x9yHvGXpOGGxc0bF7NKnnekf3pTq3jsdKVKQkJcVnAmZp72MiTtOdFqgzbVI2xErdKFF1EqZ8IE87ZiRg-TyvaN0GJGA_86O-HuxSog8bxdpOCagz2t4V2pHD8P4Nd82_Zl_3zd7sGOSSZJSfXjJwcJwm6DUBfIP418fdtbbDHSamkORzYpCYdagwum011pMHZT4YfE"
            }
        }
    }
}

0 · Share

10 |2000 characters needed characters left characters exceeded

Attachments: Up to 2 attachments (including images) can be used with a maximum of 524.3 kB each and 1.0 MB total.

Answer 4 · 2017-10-18T23:00:40Z

Jenn@amazon answered · Oct 18, 2017 at 11:00 PM

Can you share an example of the Response containing the Access and Refresh Token?

0 · Show 1 · Share

10 |2000 characters needed characters left characters exceeded

Attachments: Up to 2 attachments (including images) can be used with a maximum of 524.3 kB each and 1.0 MB total.

DerekC · Oct 20, 2017 at 04:04 PM

Jenn, any updates?. We are still in development, but I'm having to disable/enable my skill daily to get a new token. Thanks!

0 · Share ·

Expired access token with no call to refresh

question details

Related Questions