I’m trying to use new Bearer based authorisation <https://ktor.io/docs/auth.html#bearer>. Wondering ...

# ktor

[Aleksandr Ivanov]

I’m trying to use new Bearer based authorisation https://ktor.io/docs/auth.html#bearer. Wondering why we need to have refreshToken in BearerTokens . I don’t found an usage inside library. In my case I’m storing and refreshing tokens on application side.

[Aleksei Tirman [JB]]

The refreshTokens lambda indirectly used here when a server responds with 401 Unauthorized status code.

[Aleksandr Ivanov]

Yes, it is how it is used, but I’m talking about field in BearerTokens object returned from lambda, not lambda itself.

public class BearerTokens(
    public val accessToken: String,
    public val refreshToken: String
)

[Aleksei Tirman [JB]]

This is made for convenient retrieval of a refresh token after it has been loaded with a loadTokens or refreshTokens lambda.

[Aleksei Tirman [JB]]

There are no usages because the whole object is saved.

[Aleksandr Ivanov]

So, it is just to store refreshToken for future. to take it inside refreshTokens lambda and make an request for new accessToken.

[Aleksei Tirman [JB]]

Yes, except that there is no access to a BearerTokens instance inside refreshTokens lambda.

[Aleksandr Ivanov]

So, what the reason then? 🙂

[Aleksei Tirman [JB]]

I don't know. @e5l, please explain.

[Aleksandr Ivanov]

Hey, @e5l, Could you provide an idea why do we need to return BearerTokens with refrestToken field if it is not used and can’t be retrieved back.

[e5l]

Yep, It looks like the origin intention was not clearly implemented

[e5l]

We should either remove BearerToken or pass it to the refreshToken lambda

[e5l]

@Aleksei Tirman [JB], could you file an issue about API cleanup?

[Aleksandr Ivanov]

👍 Thanks. Would be great, because now it is confusing when you start to work with it.

[Aleksei Tirman [JB]]

https://youtrack.jetbrains.com/issue/KTOR-2958