Merge pull request #19514 from mvdbeek/stop_refresh_without_refresh_t…

…oken [24.2] Skip token refresh without refresh token in psa
galaxyproject · Feb 2, 2025 · d4b433b · d4b433b
2 parents 382aac5 + 083ed71
commit d4b433b
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/lib/galaxy/authnz/psa_authnz.py b/lib/galaxy/authnz/psa_authnz.py
@@ -177,7 +177,11 @@ def refresh_azure(self, user_authnz_token):
         user_authnz_token.set_extra_data(extra_data)
 
     def refresh(self, trans, user_authnz_token):
-        if not user_authnz_token or not user_authnz_token.extra_data:
+        if (
+            not user_authnz_token
+            or not user_authnz_token.extra_data
+            or "refresh_token" not in user_authnz_token.extra_data
+        ):
             return False
         # refresh tokens if they reached their half lifetime
         if "expires" in user_authnz_token.extra_data: