app-timefiller does not work with personium-core v1.7.18b

[tochi-y]

This error message is displayed in the screen.

http access

request
POST https://tochi.test.example/__token
Requestbody:

grant_type: refresh_token
refresh_token: RR~v9Jy3*************Eow
client_id: https://app-timefiller-wakaba.tochi.test.example/
client_secret: PEFz***************b24-

response
Status Code: 401 Unauthorized
Responsebody:

{
  "error_description": "[PR401-AN-0020] - Client mismatch for refresh token. [https://app-timefiller-wakaba.text.example/]",
  "error": "invalid_client"
}

[shimono]

This error is returned when switching applications upon refreshing tokens.

[tochi-y]

As well as personium/app-personium-calendar#155, I created a new environment with v1.7.19 and did a same test. Same issue is completely occurred.

Request

GET https://tochi.test.example/timefiller/
Authorization: Bearer AV~*********E5A

Response

Status Code: 403
Body:

{
  "code": "PR403-AU-0002",
  "message": {
    "lang": "en",
    "value": "Necessary privilege is lacking."
  }
}

@shimono Is it a personium-core bug?

[tochi-y]

Resolved in personium-core v1.7.20. But there is an another issue #41.