auto-refresh id token instead of asking user to re-authenticate

[tomholub]

Yes, I tested it - token is automatically refreshed in background, without user interaction.

Originally posted by @sosnovsky in FlowCrypt/flowcrypt-ios#1225 (comment)

[tomholub]

[tomholub]

Since we'd want to use that on other platforms too

[sosnovsky]

I checked tokenRefreshRequest() method of OIDAuthState - it uses
request POST https://www.googleapis.com/oauth2/v4/token
http body refresh_token=REFRESH_TOKEN&client_id=CLIENT_ID&grant_type=refresh_token

[tomholub]

You're right. I just tested this on browser extension. I'm transferring the issue there. Thanks 🥇

[tomholub]

We use idToken to authenticate with backend / enterprise services. Currently, when it expired, we always ask the user to re-authenticate, which is unnecessary.

We already use https://www.googleapis.com/oauth2/v4/token on browser extension to refresh access token. I observed the response and confirmed it also includes a new idToken each time:

Todo in this issue: extract that id_token from the token refresh API we are already calling, and save it in memory each time we call the API (while the access token is stored in local storage, the id token will be stored in-memory)

[tomholub]

In another issue: switch access token to be also stored in-memory instead of storage.

[tomholub]

In possibly same issue: deprecate FES and EKM access tokens, they provide no value if we can get fresh id tokens instead.