Unclear: Token has been expired or revoked.

[VeitSanner]

After synchronizing my account for about a week, I get the following error when executing msgvault sync:

Errors:
  ***Redacted***@gmail.com: get token source: refresh token: oauth2: "invalid_grant" "Token has been expired or revoked." (run 'add-account' first)
Error: 1 account(s) failed to sync
...

Executing msgvault add-account ***Redacted***@gmail.com does not help. I still get the same error for msgvault sync.

Any advice on how to refresh the token?

[wesm]

Delete the existing token at ~/.msgvault/tokens/$email.json and then add-account again (this has no affect on the existing database). This happened to me also and I haven't gotten around to automatic token refresh, but I will do that

[VeitSanner]

Thanks, the workaround resolves this.

[bchoor]

I found that using a token on an app in testing (for Google) will expire within 7 days. You can make it production, but it'll complain not being verified, you just have to click the extra checkbox when authenticating to get your token. I found that even with token refreshes, it'll expire - but haven't had any issues when using production app.

reference:
https://support.google.com/cloud/answer/15549945?hl=en

"Authorizations by a test user will expire seven days from the time of consent. If your OAuth client requests an offline access type and receives a refresh token, that token will also expire."

That said, I would recommend documentation that clearly explains the test vs production oauth tokens, as this is not a bug but how google oauth works by design.

As a separate anecdote, I ran sync after almost 10 days today and no auth issues using the production oauth token.

[pedramamini]

Thanks for the issue / response. This helped me today.

[robince]

To help any others, I went to "OAuth Consent Screen" -> Audience and switched to Production