The store_session call in the OAuth 2.1 credential refresh path (get_credentials) omits token_uri, client_id, client_secret, and issuer. These are stored as None, causing subsequent refresh attempts to fail and forcing full re-authentication. The correct pattern already exists in three other store_session calls in the same file (lines 151, 522, 750) — this aligns the refresh path to match.
39 KiB
39 KiB