The grant is gone: no refresh will fix it, and the user has to authorize again.
Covers a refresh token that expired after 90 days idle, one rotated out because the new one was never persisted, a
user who changed their Atlassian password, and a user who declined the consent screen.
Deliberately narrower than "any OAuth failure". A wrong client secret also fails the token endpoint — with
access_denied, the same code a declining user produces — and sending people through consent over a bad environment
variable would loop them forever. That case answers false here and surfaces as a plain isOAuthError.
The grant is gone: no refresh will fix it, and the user has to authorize again.
Covers a refresh token that expired after 90 days idle, one rotated out because the new one was never persisted, a user who changed their Atlassian password, and a user who declined the consent screen.
Deliberately narrower than "any OAuth failure". A wrong client secret also fails the token endpoint — with
access_denied, the same code a declining user produces — and sending people through consent over a bad environment variable would loop them forever. That case answersfalsehere and surfaces as a plain isOAuthError.