As stated in https://wiki.vg/Authentication calls to the /authenticate endpoint should include a clientToken.
Currently, a clientToken is generated in the Authenticator.getAuth function, but it is not passed to the /authenticate endpoint, as a result you get an accessToken that has no associated clientToken.
Authenticator.validate does not send the clientToken, currently that is correct since the accessToken is generated without one.
Authenticator.refresh however does send the clientToken but it is ignored since the access token is generated without one.
same for Authenticator.invalidate
As stated in https://wiki.vg/Authentication calls to the /authenticate endpoint should include a clientToken. Currently, a clientToken is generated in the
Authenticator.getAuth
function, but it is not passed to the /authenticate endpoint, as a result you get an accessToken that has no associated clientToken.Authenticator.validate
does not send the clientToken, currently that is correct since the accessToken is generated without one.Authenticator.refresh
however does send the clientToken but it is ignored since the access token is generated without one. same forAuthenticator.invalidate