LWA credentials rotation propagation delay

[mroytman83]

So I have rotated secret for my App's LWA credentials, but I keep getting the 403 status code error: "The LWA secret token you provided has expired." I waited around 30 minutes to execute my calls at SP-API endpoint, but to no avail. I have also re-authorized the app with a new refresh token and that hasn't helped either? Would really appreciate some assistance

[ritikacd]

Hi @mroytman83

After you generate a new LWA credential (client secret), you must update your credentials for any applications that call the Amazon APIs. Your old credentials expire seven days after you generate new credentials.

Refresh tokens are tied to the LWA client identifier. Upon LWA rotation, a new LWA client secret will be created. You will need to use this new secret along with its existing client identifier and refresh token to retrieve new access tokens. Refresh tokens do not need to be recreated. Please ensure that you are using new client secret in your API call.

If you still have issues, this needs further investigation. Please open a support case following the guidance herehttps://developer.amazonservices.com/support-guidelines) so we can pursue the investigation as additional details are required from your end.

Thanks,
Ritika
Selling Partner API Services

[stefnats]

@mroytman83 maybe you're mixing up some tokens or secrets or access keys? Could you double-check? When I rotate it, calls are successful immediately after changing the secret.