[kohbanye]

Summary

KaggleCredentials.access_token_has_expired() subtracts its 30-minute margin from the current time:

self._access_token_expiration < datetime.now(timezone.utc) - timedelta(minutes=30)

This is true only once the token has been expired for more than 30 minutes. For the first 30 minutes after expiry, get_access_token() keeps returning the expired token. Every API call then fails with HTTP 401, and the kaggle CLI prints "Authentication required to call the Kaggle API." Meanwhile kaggle auth login reports "You are already logged-in". The failure clears itself 30 minutes later.

This change adds the margin instead, so the token is refreshed 30 minutes before it expires. The margin is now a named constant, ACCESS_TOKEN_REFRESH_MARGIN.

Needs manual sync with the kapigen base.

Fixes #74. Also reported in Kaggle/kaggle-cli#1217.

Verification

Ran kaggle competitions list with kaggle 2.2.4 against the live API, using a ~/.kaggle/credentials.json whose access_token_expiration was set to 10 minutes in the past:

• Before this change: the CLI printed "Authentication required to call the Kaggle API." and the credentials file was left unchanged.
• After this change: the access token was refreshed (the new access_token_expiration is 12 hours later) and the command printed the competition list.

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.