Is it possible to use ServiceAuth authentication, for task longer than duration of token validity(in this case OTA)

[leropo00]

My plan is to have the following functionalities working with ServiceAuth:

Realtime database operations,
Stream operations that listen on changes,
OTA updates via storage

I am using ServiceAuth authenticaion, in documentation for ServiceAuth it reads
The auth token need to be re-created instead of refreshing and I do this in code.

While both realtime database operations and stream work after token recreation,
ota stops working, when download takes longer that token validity
(I recreate the token before starting ota, but it still not enough)

I have left the example here code.
My question is, can the following be achieved with ServiceAuth
and if not can I use any other authentication for this,
since I am not sure what should I use(I would prefer auth, not to be tied to user account)
Than you for your answer.

Here are the relevant parts of my sketch used for setup and ota part:

  #include <Arduino.h>
  #include <FirebaseClient.h>
  
  
  void authHandler();
  
  void timeStatusCB(uint32_t &ts);
  
  void printResult(AsyncResult &aResult);
  
  DefaultNetwork network; // initilize with boolean parameter to enable/disable network reconnection
  
  ServiceAuth sa_auth(timeStatusCB, FIREBASE_CLIENT_EMAIL, FIREBASE_PROJECT_ID, PRIVATE_KEY, 3000);
  
  
  FirebaseApp app;
  RealtimeDatabase Database;
  Storage storage;
  
  #include <WiFiClientSecure.h>
  WiFiClientSecure ssl_client;
  
  using AsyncClient = AsyncClientClass;
  
  AsyncClient aClient(ssl_client, getNetwork(network));
  
  AsyncResult aResult_no_callback;
  
  #include <ArduinoJson.h>
  
  
  
  void setup()
  {
  
	  // setup done for firebase client, before this wifi is connected and serial 
  
      ssl_client.setInsecure();
      app.setCallback(asyncCB);
  
      initializeApp(aClient, app, getAuth(sa_auth), aResult_no_callback);
  
      app.getApp<RealtimeDatabase>(Database);
      Database.url(FIREBASE_DATABASE_URL);
      Database.get(aClient, "/test/stream", asyncCB, true /* SSE mode (HTTP Streaming) */, "streamTask");
      app.getApp<Storage>(storage);
  
      authHandler();
  }
  
  void loop()    
  {
      authHandler();
  
	  // refresh when expired
      if(app.ttl() == 0 ) {        
         initializeApp(aClient, app, getAuth(sa_auth), aResult_no_callback);
      }
  
	  // realtime database operations and stream event work normaly after refresh
	  startOta();
  
      delay(10000);
  }
  
  
  void authHandler()
  {
      // Blocking authentication handler with timeout
      unsigned long ms = millis();
  
      while (app.isInitialized() && !app.ready() && millis() - ms < 120 * 1000)
      {
          Serial.println("inside authHandler loop");
          // This JWT token process required for ServiceAuth and CustomAuth authentications
          JWT.loop(app.getAuth());
          asyncCB(aResult_no_callback);
      }
  
  }
  
  
  void startOta() 
  {
	  // under certain conditions I start the ota process and only once
	  // if ota process was started, I have special variable, that blocks restarts, this is not a problem
  
      initializeApp(aClient, app, getAuth(sa_auth), aResult_no_callback);
      authHandler();
  
	  // this starts the ota call, I can see the output in asyncCB
      storage.ota(aClient, FirebaseStorage::Parent(STORAGE_BUCKET_ID, "test/firmware/firebase_slika.ino.esp32c3.bin"), asyncCB);
  
  }
  
  
  void asyncCB(AsyncResult &aResult)
  {
  
	  //  I can see the download progress, this is my last output
	  //  Downloaded, task: task_1917, 66% (768550 of 1163472)
  
	  
	  //  But after token gets recreated I receive the following error
	  //   Error task: task_1917, msg: TCP receive time out, code: -3
  
  
      // listening for OTA
      if (aResult.downloadProgress())
      {
          Firebase.printf("Downloaded, task: %s, %d%s (%d of %d)\n", aResult.uid().c_str(), aResult.downloadInfo().progress, "%", aResult.downloadInfo().downloaded, aResult.downloadInfo().total);
          if (aResult.downloadInfo().total == aResult.downloadInfo().downloaded)
          {
              Firebase.printf("Download task: %s, completed!", aResult.uid().c_str());
              if (aResult.isOTA()) {
                  Serial.println("Update firmware completed.");
                  Serial.println();
                  Serial.println("Restarting...\n\n");
                  delay(2000);
                  ESP.restart();
              }
          }
      }
  
  
      // rest of the code, I also have listening for stream events
      if (aResult.available())
      {
          RealtimeDatabaseResult &RTDB = aResult.to<RealtimeDatabaseResult>();
          if (RTDB.isStream())
          {	
			  // listeners
		  }
	  }
  }

[mobizt]

You can only refresh the token in case ID token authorization. The authorization using Service Account credentials was unable to refresh as google API does not provide the mean to refresh.

Your request was added in the library v1.2.15. You can update and try it.