As an user, when my MeLi Account authorization expires/invalidates, I want to be informed to decide what to do (ie. login again or remove the account)
tmilar opened this issue · 0 comments
tmilar commented
When a MeLi account authorization (not to be confused with the access_token
) expires, we currently have no way of noticing it.
A solution could be:
- handle MeLi API response auth errors (except regular access_token expiration, in that case we just refresh)
- store the auth error in the Account document
- all further requests for that account must be ignored/fail prematurely.
Somewhere:
- inform the auth error to the user, suggest to login again
When user account logs in and authorizes again:
- remove stored authorization errors