Entra
Microsoft Entra refresh token expired or was revoked
AADSTS70008: ExpiredOrRevokedGrant
Microsoft Entra rejected the token refresh because the refresh token is expired, revoked, or otherwise no longer valid for reuse.
Error AtlasError Documentation and ResolutionObserved message
AADSTS70008: ExpiredOrRevokedGrant
Why it happens
- The refresh token is expired.
- The refresh token was revoked after a security or account event.
- The app attempted to reuse a token that is no longer valid.
How to fix it
- Prompt the user through a fresh sign-in flow.
- Replace invalid cached tokens with newly issued ones after sign-in.
- Review token lifecycle handling if the app is repeatedly attempting expired refreshes.
Official reference
Microsoft Learn: Microsoft Entra authentication and authorization error codesRelated errors
Explore more