HTTP-client auth with Bearer token

Subsystem Client/Server, particular relevant ktor module(s) if applicable. ktor HTTP-client, auth

Is your feature request related to a problem? Please describe. Currently, Ktor HTTP-client supports only 2 types of providers: Basic and Digest. But in a real-life project is a standard to use Bearer token pair - access and refresh. So it will be great to add support of Bearer tokens to multiplatform Ktor’s HTTP-client. So the problem itself can be split into 4 sub-tasks:

1. Persist token pair in a safe place
2. Add them to auth headers
3. In case when the request with access token returns 401, 3.1. pause all present requests 3.2 refresh it with refresh token… and so on, regular flow. 3.3 restart interrupted requests from 3.1

Describe the solution you’d like Create BearerAuthConfig, BearerAuthProvider like its Basic and Digest versions. Update Auth class to be able to save, load and refresh tokens. Something like this:

fun provide(): HttpClient = HttpClient {
        install(Auth) {
            bearer {
                refresh = TODO("lambda function that get new access token and return a string"),
                revoke = TODO("lambda function that removes tokens")
            }
        }
    }

Motivation to include to ktor Add support of Bearer tokens for clients.

[e5l]

Merged in main. Will be available in Ktor 1.6.0

[Ololoshechkin]

Thanks for the feature request! What you suggest is actually 2 features:

1. Bearer (jwt) support in HttpClient
2. Automatic token refresh.

The first one should be added as a part of Auth feature and we’ll be working on that. And the second one (token renewal) is currently a bit out of our scope but we’ll keep our eye on it in future.