fix: Better error on expired token (#90)

Co-authored-by: Kemal Hadimli <disq@users.noreply.github.com>

Author: disq

auth/token.go

@@ -84,7 +84,10 @@ func (tc *TokenClient) GetToken() (Token, error) {
 	}
 	tokenResponse, err := tc.generateToken(refreshToken)
 	if err != nil {
-		return UndefinedToken, fmt.Errorf("failed to sign in with custom token: %w", err)
+		if IsTokenExpiredError(err) {
+			return UndefinedToken, fmt.Errorf("authentication token expired: %w. Hint: You may need to run `cloudquery login` or set %s", err, EnvVarCloudQueryAPIKey)
+		}
+		return UndefinedToken, fmt.Errorf("failed to sign in with token: %w", err)
 	}
 
 	if err := SaveRefreshToken(tokenResponse.RefreshToken); err != nil {
@@ -116,19 +119,16 @@ func (tc *TokenClient) generateToken(refreshToken string) (*tokenResponse, error
 		return nil, err
 	}
 	defer resp.Body.Close()
-	if resp.StatusCode != http.StatusOK {
-		body, readErr := io.ReadAll(resp.Body)
-		if readErr != nil {
-			return nil, fmt.Errorf("failed to read response body: %w", readErr)
-		}
-		return nil, fmt.Errorf("failed to refresh token: %s: %s", resp.Status, body)
-	}
-
-	var tr tokenResponse
 	body, err := io.ReadAll(resp.Body)
 	if err != nil {
 		return nil, err
 	}
+
+	if resp.StatusCode != http.StatusOK {
+		return nil, fmt.Errorf("failed to refresh token: %s: %w", resp.Status, TokenErrorFromBody(body))
+	}
+
+	var tr tokenResponse
 	if err := parseToken(body, &tr); err != nil {
 		return nil, err
 	}

auth/token_error.go

@@ -0,0 +1,39 @@
+package auth
+
+import (
+	"encoding/json"
+	"errors"
+)
+
+type TokenError struct {
+	Body         []byte `json:"-"`
+	ErrorDetails struct {
+		Code    int    `json:"code"`
+		Message string `json:"message"`
+		Status  string `json:"status"`
+	} `json:"error"`
+}
+
+func (t TokenError) Error() string {
+	return string(t.Body)
+}
+
+func TokenErrorFromBody(body []byte) *TokenError {
+	t := &TokenError{}
+	_ = json.Unmarshal(body, t)
+	t.Body = body
+	return t
+}
+
+func IsTokenExpiredError(err error) bool {
+	if err == nil {
+		return false
+	}
+
+	var te *TokenError
+	if errors.As(err, &te) {
+		return te.ErrorDetails.Code == 400 && te.ErrorDetails.Message == "TOKEN_EXPIRED"
+	}
+
+	return false
+}