[Alpine-info] invalid_grant error AADSTS70043: expired or invalid refresh token

[Chamberlain, Brad]

Aha, I think I was able to solve my problem by looking through the alpine --help​ options and taking a stab at one of them.  Specifically, when I re-ran alpine -erase_stored_passwords​, I was taken to the Microsoft device login page.  I'm not sure why I haven't had to do this in the past, though...  maybe this is the first time I've had a device token expire since using alpine 2.26 on a Mac?

I saw a message flash by very briefly after I asked it to save my credentials for future re-use about deleting something from the keychain, so maybe that is a factor as well?

Anyway, I'm still interested in improving my knowledge and understanding here, if anyone can provide more details as to what might have been going on.

Thanks!
-Brad

________________________________
From: Chamberlain, Brad
Sent: Monday, July 17, 2023 9:55 AM
To: Alpine Users <alpine-info at u.washington.edu>
Subject: invalid_grant error AADSTS70043: expired or invalid refresh token

Hello alpine community —

I returned from a week's vacation this morning, fired up alpine and have been getting error messages that are unfamiliar to me.  Upon trying to open my inbox, I get:

      [>Code 400: invalid_grant: AADSTS70043: The refresh token has expired or is invalid due to sign-in frequenc<]

And when trying to send a mail, I get the similar error:

      [>Error sending: Code 400: invalid_grant: AADSTS70043: The refresh token has expired or is invali<]

The mention of sign-in frequency is confusing to me since I haven't signed in ~10 days time (unless it's actually referring to a lack of frequency?).

This is running alpine from my desktop Mac using the homebrew formula for alpine 2.26 and an outlook.office365.com inbox path using xoauth2 authorization.  This configuration has been working like a charm since I switched to it a month or so ago, so I'm hoping the fix is something simple.

In the past, I've been directed to do the little handshake with Outlook through a web browser at some frequency (every few months) and am wondering whether I just need to force / request that to happen in some way?

Thanks for any tips,
-Brad



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman12.u.washington.edu/pipermail/alpine-info/attachments/20230717/ce39ac40/attachment.html>