HTTPError: 400 Client Error: Bad Request for url: https://aai.egi.eu/auth/realms/egi/protocol/openid-connect...

[galaxyproject-sentryintegration]

Sentry Issue: USEGALAXY-EU-MAIN-1JBA

HTTPError: 400 Client Error: Bad Request for url: https://aai.egi.eu/auth/realms/egi/protocol/openid-connect/token
(1 additional frame(s) were not displayed)
...
  File "galaxy/authnz/managers.py", line 291, in refresh_expiring_oidc_tokens_for_provider
    refreshed = backend.refresh(trans, auth)
  File "galaxy/authnz/psa_authnz.py", line 196, in refresh
    user_authnz_token.refresh_token(strategy)

An error occurred when refreshing user token

[kysrpex]

Given #19514 and the fact that the database entries causing the bug look like this,

{
  "access_token": "********",
  "auth_time": 1627302378,
  "expires_in": 3599,
  "id_token": "********",
  "token_type": "Bearer"
}

so indeed ("refresh_token" not in user_authnz_token.extra_data) is True, rather than user_authnz_token.extra_data["refresh_token"] is None (see social-core code causing the bug); to me it makes sense to close the issue and only reopen it if the problem arises again.

[mvdbeek]

There's also https://sentry.galaxyproject.org/share/issue/45594f7a411749f68b7292edeb40cafc/ that might require a similar fix ?