Auth0 Java SDK - Refreshing Management API Token

Help
, ,
1

Is there a recommended way of handling Management API token refresh?

In my mind there are three ways…

  1. Handle the API exception, refresh token and re-run the request.
  2. Store tokenExpiresAt and refresh the token when managementAPI instance is required. Something in the lines of
public ManagementAPI getManagementAPI() {

    if (currentTime > tokenExpiresAt) {
        refreshToken();
        managementApi.setApiToken("new token");
    }

    return managementApi;
}
  1. Have a background thread that refreshes the token at defined periodicity.

All three options have some level of drawbacks.

For 1, retries should be handled at each Auth0 call. the code becomes repetitive.
In 2, we cannot let callers cache managementAPI object. They should always use getManagementAPI().
In case of 3, additional handling is required to ensure that the background thread is re-created if it crashes for any reason.

Please share your suggestions and thoughts.

3

Hi @krisnik,

Welcome to the Auth0 Community!

I’m a bit surprised the library doesn’t handle this automatically. It may be worth submitting an issue in the GH repo and see if this is a bug.

For now, I would suggest either inspecting the exp (Expiration Time) claim, or refreshing when you receive the error.

1 Like
4

Thanks for the response. Have created - Auto-refresh of API Token for Management APIs · Issue #473 · auth0/auth0-java · GitHub

1 Like
5

Thank you! Let us know if you have any other questions.

6

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.