Add new error type to AuthenticationError (#820)

auth0 · Jan 4, 2024 · a0fe839 · a0fe839
1 parent dfbd114
commit a0fe839
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 3 deletions.
diff --git a/Auth0/AuthenticationError.swift b/Auth0/AuthenticationError.swift
@@ -102,7 +102,12 @@ public struct AuthenticationError: Auth0APIError {
     public var isRefreshTokenDeleted: Bool {
         return self.code == "invalid_grant"
             && self.localizedDescription == "The refresh_token was generated for a user who doesn't exist anymore."
+    }
 
+    // When the provided refresh token is invalid or expired
+    public var isInvalidRefreshToken: Bool {
+        return self.code == "invalid_grant"
+            && self.localizedDescription == "Unknown or invalid refresh token."
     }
 
     /// When Auth0 denies access due to some misconfiguration or an error in an Action or Rule.

diff --git a/Auth0Tests/AuthenticationErrorSpec.swift b/Auth0Tests/AuthenticationErrorSpec.swift
@@ -355,7 +355,7 @@ class AuthenticationErrorSpec: QuickSpec {
                 expect(error.isInvalidCredentials) == true
             }
 
-            it("should detect invalid refresh token") {
+            it("should detect refresh token deleted") {
                 let values = [
                     "error": "invalid_grant",
                     "error_description": "The refresh_token was generated for a user who doesn't exist anymore."
@@ -364,6 +364,15 @@ class AuthenticationErrorSpec: QuickSpec {
                 expect(error.isRefreshTokenDeleted) == true
             }
 
+            it("should detect invalid refresh token") {
+                let values = [
+                    "error": "invalid_grant",
+                    "error_description": "Unknown or invalid refresh token."
+                ]
+                let error = AuthenticationError(info: values, statusCode: 403)
+                expect(error.isInvalidRefreshToken) == true
+            }
+
             it("should detect invalid mfa token") {
                 let values = [
                     "error": "expired_token",
@@ -468,7 +477,8 @@ class AuthenticationErrorSpecSharedExamplesConfiguration: QuickConfiguration {
                 expect(error.isPasswordNotStrongEnough).to(beFalse(), description: "should not match password strength")
                 expect(error.isPasswordAlreadyUsed).to(beFalse(), description: "should not match password history")
                 expect(error.isInvalidCredentials).to(beFalse(), description: "should not match invalid credentials")
-                expect(error.isRefreshTokenDeleted).to(beFalse(), description: "should not match invalid refresh token")
+                expect(error.isRefreshTokenDeleted).to(beFalse(), description: "should not match refresh token deleted")
+                expect(error.isInvalidRefreshToken).to(beFalse(), description: "should not match invalid refresh token")
                 expect(error.isPasswordLeaked).to(beFalse(), description: "should not match password leaked")
                 expect(error.isLoginRequired).to(beFalse(), description: "should not match login required")
             }
@@ -534,7 +544,8 @@ class AuthenticationErrorSpecSharedExamplesConfiguration: QuickConfiguration {
                 expect(error.isPasswordAlreadyUsed).to(beFalse(), description: "should not match password history")
                 expect(error.isAccessDenied).to(beFalse(), description: "should not match access denied")
                 expect(error.isInvalidCredentials).to(beFalse(), description: "should not match invalid credentials")
-                expect(error.isRefreshTokenDeleted).to(beFalse(), description: "should not match invalid refresh token")
+                expect(error.isRefreshTokenDeleted).to(beFalse(), description: "should not match refresh token deleted")
+                expect(error.isInvalidRefreshToken).to(beFalse(), description: "should not match invalid refresh token")
                 expect(error.isPasswordLeaked).to(beFalse(), description: "should not match password leaked")
                 expect(error.isLoginRequired).to(beFalse(), description: "should not match login required")
             }