refresh before downscoping

GoogleCloudPlatform · Oct 28, 2022 · f670014 · f670014
1 parent 15e41cd
commit f670014
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/core/src/main/java/com/google/cloud/sql/core/CloudSqlInstance.java b/core/src/main/java/com/google/cloud/sql/core/CloudSqlInstance.java
@@ -527,7 +527,9 @@ private Certificate fetchEphemeralCertificate(KeyPair keyPair) {
 
     if (enableIamAuth) {
       try {
-        GoogleCredentials downscoped = getDownscopedCredentials(credentials.get());
+        OAuth2Credentials creds = credentials.get();
+        creds.refresh();
+        GoogleCredentials downscoped = getDownscopedCredentials(creds);
         downscoped.refresh();
         String token = downscoped.getAccessToken().getTokenValue();
         // TODO: remove this once issue with OAuth2 Tokens is resolved.