Skip to content

Access Token Expiry Not Triggering Refresh in Atlassian MCP Server #12

@amirejaz

Description

@amirejaz

After the access token expires, the Atlassian MCP server fails to refresh it using the refresh_token. Instead, it continues to send API requests with the expired access_token, resulting in 401 Unauthorized responses from the upstream service.

Current Behavior

  • The server successfully authenticates and receives a valid access_token and refresh_token.
  • Once the access token reaches its expiry (as per the Expiry field in the token struct), subsequent API calls return 401 Unauthorized.
  • No refresh request appears to be made using the refresh_token.

Expected Behavior

When the access token expires, the MCP server should automatically use the refresh_token to obtain a new access_token and retry the failed request seamlessly.


Steps to Reproduce

  1. Start the Atlassian MCP server and authenticate successfully.
  2. Allow 1 hour to pass (or force token expiry).
  3. Observe API calls made by the MCP server to Atlassian APIs.
  4. After expiry, responses become 401 Unauthorized.
  5. No refresh request is observed in logs or network traces.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions