Procore refresh_token failed: invalid_grant, message: The provided authorization grant is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client. - error: 401 Unauthorized

# app/controllers/api/v1/integrations_controller.rb:35-38
def access_token
  token = repository_instance.access_token
  render_json 200, token
end

# app/repositories/integration_repository.rb:89-91
if @model.expired_at < 10.minutes.since
  refresh_token  # expired_at이 62일 전이므로 조건 충족 → refresh 시도
else
  { provider: @model.provider, access_token: @model.access_token, ... }
end

# app/repositories/integration_repository.rb:106-128
Cupix::Logger.info("[Integration] refresh token for #{@model.provider} integration(#{@model.id}) - state: #{@model.state}, expired_at: #{@model.expired_at}, refresh_token_expired_at: #{@model.refresh_token_expired_at}")
# ... provider dispatch → ProcoreOperation
token = operation_class.refresh_token(@model.refresh_token, @model.region)

# app/operations/procore_operation.rb:42-62
def self.refresh_token(refresh_token, region)
  data = {
    client_id: $OAUTH[:procore][:client_id],
    client_secret: $OAUTH[:procore][:client_secret],
    grant_type: 'refresh_token',
    refresh_token: refresh_token,
    redirect_uri: $OAUTH[:procore][:redirect_uri]
  }
  begin
    url = "#{$OAUTH[:procore][:site]}#{$OAUTH[:procore][:refresh_url]}"
    response = RestClient.post(url, data)
  rescue RestClient::Exception => e
    response = JSON.parse(e.response)
    Cupix::Logger.error("Procore refresh_token failed: #{response['error']}, message: #{response['error_description']} - error: #{e.message}")
    raise Cupix::Errors::Parameter.new(
      code: 'ARG10000',
      reason: "Procore Authentication failed: #{response['error']}",
      message: response['error_description']
    )
  end
  # ...
end

# app/repositories/integration_repository.rb:130-142
rescue StandardError => e
  uncheck_refresh_request
  raise e if e.code == 'ARG10060'
  @model.refresh_token_failed_at = DateTime.now
  @model.refresh_token_expired_at = nil
  @model.refresh_token_response_body = token  # 주의: token은 undefined (rescue 블록에서는 line 128이 실패하여 token 미할당)
  @model.failed_state!
  Cupix::Logger.error("[Integration] failed to refresh token for #{@model.provider} integration(#{@model.id}) - state: #{@model.state}, error_message: #{e.message}")
  raise e
end

# config/initializers/integration.rb:1
TOKEN_REFRESH_REQUIRED_PROVIDERS = %w[bim360].freeze

# app/repositories/integration_repository.rb:145-149
if TOKEN_REFRESH_REQUIRED_PROVIDERS.include?(@model.provider)
  @model.refresh_token_expired_at = 14.days.since  # bim360만 해당
else
  @model.refresh_token_expired_at = nil  # procore → 항상 nil
end

# app/models/concerns/statable/integration.rb:12
scope :refresh_token_due_to_expire, -> { not_failed.where.not(refresh_token_expired_at: nil).where('refresh_token_expired_at < ?', 1.days.since) }

service:cupixworks-api status:error Procore
Time: 2026-04-20T02:57:00Z ~ 2026-04-20T04:30:00Z

service:cupixworks-api Procore
Time: 2026-04-20T03:50:00Z ~ 2026-04-20T04:10:00Z

[Integration] refresh token for procore integration(524) - state: active, expired_at: 2026-02-17 20:58:20 UTC, refresh_token_expired_at:

Procore refresh_token failed: invalid_grant, message: The provided authorization grant is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client. - error: 401 Unauthorized

[Integration] failed to refresh token for procore integration(524) - state: failed, error_message: The provided authorization grant is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client.

Controller: Api::V1::IntegrationsController#access_token
POST /api/v1/reviews/2pujqr/integrations/procore/access_token → 400
Duration: 385.81ms
User: tyler.bichan@calderstewart.co.nz (ID: 5275)
Team: calderstewart (ID: 141)
error.class: Cupix::Errors::Parameter, error.code: ARG10000

[Integration] refresh token for procore integration(966) - state: active, expired_at: 2026-04-20 04:03:39 UTC, refresh_token_expired_at:

service:cupixworks-api status:error invalid_grant
Time: 2026-04-13T00:00:00Z ~ 2026-04-20T04:30:00Z

service:cupixworks-api "Procore refresh_token failed" @environment:production

service:cupixworks-api status:warn "Procore refresh_token failed" @environment:production