feat: improve the refresh token

api/controllers/console/workspace/tool_providers.py

@@ -18,7 +18,7 @@ from controllers.console.wraps import (
 )
 from core.entities.mcp_provider import MCPAuthentication, MCPConfiguration
 from core.mcp.auth.auth_flow import auth, handle_callback
-from core.mcp.error import MCPAuthError, MCPError
+from core.mcp.error import MCPAuthError, MCPError, MCPRefreshTokenError
 from core.mcp.mcp_client import MCPClient
 from core.model_runtime.utils.encoders import jsonable_encoder
 from core.plugin.impl.oauth import OAuthHandler
@@ -1007,7 +1007,12 @@ class ToolMCPAuthApi(Resource):
                     return {"result": "success"}
             except MCPAuthError as e:
                 service = MCPToolManageService(session=session)
-                return auth(provider_entity, service, args.get("authorization_code"))
+                try:
+                    return auth(provider_entity, service, args.get("authorization_code"))
+                except MCPRefreshTokenError as e:
+                    with session.begin():
+                        service.clear_provider_credentials(provider=db_provider)
+                    raise ValueError(f"Failed to refresh token: {e}") from e
             except MCPError as e:
                 with session.begin():
                     service.clear_provider_credentials(provider=db_provider)

api/core/mcp/auth/auth_flow.py

@@ -12,6 +12,7 @@ from pydantic import BaseModel, ValidationError
 
 from core.entities.mcp_provider import MCPProviderEntity, MCPSupportGrantType
 from core.helper import ssrf_proxy
+from core.mcp.error import MCPRefreshTokenError
 from core.mcp.types import (
     LATEST_PROTOCOL_VERSION,
     OAuthClientInformation,
@@ -286,7 +287,7 @@ def refresh_authorization(
 
     response = ssrf_proxy.post(token_url, data=params)
     if not response.is_success:
-        raise ValueError(f"Token refresh failed: HTTP {response.status_code}")
+        raise MCPRefreshTokenError(response.text)
     return OAuthTokens.model_validate(response.json())
 
 

api/core/mcp/error.py

@@ -8,3 +8,7 @@ class MCPConnectionError(MCPError):
 
 class MCPAuthError(MCPConnectionError):
     pass
+
+
+class MCPRefreshTokenError(MCPError):
+    pass