refresh_token_example.py

import argparse
import requests
import json


def refresh_access_token(
    refresh_token: str,
    client_id: str,
    client_secret: str,
    token_url: str = "https://api.snyk.io/oauth2/token",
) -> dict[str, str]:
    """
    Refreshes the access token using the provided refresh token.

    Args:
        refresh_token (str): The refresh token.
        client_id (str): The client ID for the Snyk app.
        client_secret (str): The client secret for the Snyk app.
        token_url (str): The token endpoint URL.

    Returns:
        dict: The response containing the new access_token, refresh_token, etc.
    """

    data: dict = {
        "grant_type": "refresh_token",
        "refresh_token": refresh_token,
        "client_id": client_id,
        "client_secret": client_secret,
    }
    headers: dict = {"Content-Type": "application/x-www-form-urlencoded"}

    response: requests.Response = requests.post(token_url, data=data, headers=headers)
    response.raise_for_status()

    token_data = response.json()

    return token_data


def main():
    parser: argparse.ArgumentParser = argparse.ArgumentParser(
        description="Refresh a Snyk OAuth2 access token using a refresh token."
    )
    parser.add_argument("--refresh-token", required=True, help="Refresh token")
    parser.add_argument("--client-id", required=True, help="Snyk App client ID")
    parser.add_argument("--client-secret", required=True, help="Snyk App client secret")
    parser.add_argument(
        "--token-url",
        default="https://api.snyk.io/oauth2/token",
        help="Token endpoint URL (default: https://api.snyk.io/oauth2/token)",
    )

    args: argparse.Namespace = parser.parse_args()

    token_data: dict[str, str] = refresh_access_token(
        refresh_token=args.refresh_token,
        client_id=args.client_id,
        client_secret=args.client_secret,
        token_url=args.token_url,
    )

    print(json.dumps(token_data, indent=2))


if __name__ == "__main__":
    main()