# Oauth refresh token, best workflow?
**URL:** https://discourse.nodered.org/t/oauth-refresh-token-best-workflow/62962
**Category:** General
**Tags:** security
**Created:** [23 May 2022 10:51 UTC](https://discourse.nodered.org/t/oauth-refresh-token-best-workflow/62962 "2022-05-23T10:51:48Z")
**Posts on this page:** 11
**Page:** 1
### Author:  [@lizzardguki](https://discourse.nodered.org/u/lizzardguki)
#### Post date: [23 May 2022 10:51 UTC](https://discourse.nodered.org/t/oauth-refresh-token-best-workflow/62962/1 "2022-05-23T10:51:48Z")
I have a basic OAuth flow to authenticate with 3rd party API , after the authentication is successful, I use a delay node to wait for x seconds (expires\_in property - 100 seconds) and then I push the message to refresh the token, and I am trying to keep that loop going, but after a couple of token refreshes, the node-red fails to authenticate. Is there any better way to make the flow?
---
### Author:  [@lu4t](https://discourse.nodered.org/u/lu4t)
#### Post date: [23 May 2022 12:26 UTC](https://discourse.nodered.org/t/oauth-refresh-token-best-workflow/62962/2 "2022-05-23T12:26:44Z")
does the token tell you when is it expiring? is it a jwt?
---
### Author:  [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [23 May 2022 12:34 UTC](https://discourse.nodered.org/t/oauth-refresh-token-best-workflow/62962/3 "2022-05-23T12:34:04Z")
Also, is it a public API, can you share?
---
### Author:  [@lizzardguki](https://discourse.nodered.org/u/lizzardguki)
#### Post date: [23 May 2022 12:35 UTC](https://discourse.nodered.org/t/oauth-refresh-token-best-workflow/62962/4 "2022-05-23T12:35:36Z")
Yeah it does.
---
### Author:  [@lizzardguki](https://discourse.nodered.org/u/lizzardguki)
#### Post date: [23 May 2022 12:35 UTC](https://discourse.nodered.org/t/oauth-refresh-token-best-workflow/62962/5 "2022-05-23T12:35:50Z")
Yes, its Airthings API
---
### Author:  [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [23 May 2022 12:43 UTC](https://discourse.nodered.org/t/oauth-refresh-token-best-workflow/62962/6 "2022-05-23T12:43:57Z")
> [@lizzardguki](#):
>
> Airthings API
Are you sure you aren't exceeding the 120 requests per hour limit?
---
### Author:  [@lizzardguki](https://discourse.nodered.org/u/lizzardguki)
#### Post date: [23 May 2022 12:49 UTC](https://discourse.nodered.org/t/oauth-refresh-token-best-workflow/62962/7 "2022-05-23T12:49:33Z")
Probably, have too much organizations and around 900 sensors that i try to get latest data upon authentication. I have added delays so node-red won't hang but i think that may causing the problems.
---
### Author:  [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [23 May 2022 16:40 UTC](https://discourse.nodered.org/t/oauth-refresh-token-best-workflow/62962/8 "2022-05-23T16:40:56Z")
Then you need a business account I think.
---
### Author:  [@lu4t](https://discourse.nodered.org/u/lu4t)
#### Post date: [23 May 2022 18:12 UTC](https://discourse.nodered.org/t/oauth-refresh-token-best-workflow/62962/9 "2022-05-23T18:12:19Z")
then what's the point of refreshing the token continuously?.
Why don't you just wait till it's about to expire and ask for a new one?
---
### Author:  [@lizzardguki](https://discourse.nodered.org/u/lizzardguki)
#### Post date: [23 May 2022 19:13 UTC](https://discourse.nodered.org/t/oauth-refresh-token-best-workflow/62962/10 "2022-05-23T19:13:25Z")
In addition to Airthings Webhook, we also scrape data every 7 days as a way of precautions, and push the data to an Influx database.
We use data from API such as sensor name, location, organization to pass it along with webhook live data.
---
### Author:  [@system](https://discourse.nodered.org/u/system)
#### Post date: [22 July 2022 19:13 UTC](https://discourse.nodered.org/t/oauth-refresh-token-best-workflow/62962/11 "2022-07-22T19:13:48Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.