Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

OAuth access and refresh tokens invalid after email change

James Sear
Contributor
February 9, 2020

I have encountered an instance where a user in my system has changed their Atlassian ID email address.

 

Unfortunately, the refresh token now does not return a valid access token for my application to make requests with. The error I get back is:

{    
"error": "invalid_grant",
"error_description": "Unknown or invalid refresh token."
}

 

Surely this isn't expected behaviour? A change in email doesn't mean that the user has revoked access to an oauth application

0 answers

Suggest an answer

Log in or Sign up to answer