refresh id token periodically, same as access token

[tomholub]

part of #1545

description here: FlowCrypt/flowcrypt-ios#1091

iOS implementation: https://github.com/FlowCrypt/flowcrypt-ios/pull/1225/files

browser extension implementation (simplified):

more context (browser extension) FlowCrypt/flowcrypt-browser#4194 (comment)

[DenBond7]

https://developers.google.com/android/reference/com/google/android/gms/auth/api/signin/GoogleSignInClient#silentSignIn()
https://gist.github.com/glcoder/c2783ad8c99063fc12250b9e32620751
https://stackoverflow.com/questions/38737021/how-to-refresh-id-token-after-it-expires-when-integrating-google-sign-in-on-andr

[DenBond7]

To do that we can use Google's library that uses GoogleSignInClient#silentSignIn() to fetch the latest version of SignIn data(that contains idToken) without a user action(silently). If silentSignIn() will fail we can ask a user to re-authenticate.

That what I said means we don't need to find out how to refresh idToken manually. The library does it for us. I think we can close it.

[tomholub]

Should also save the id token in memory each time we renew it. Else you'll have to get a fresh new token each time, I'm not sure if that's good.

Unless google library caches it for you.

[DenBond7]

Unless google library caches it for you.

Yes, it caches that data

[tomholub]

ok to close in that case

[DenBond7]

After adding the last changes I started to test the whole process. It seems that fetching the last idToken on Android has interesting behavior. The Android library can return expired idToken but after a few attempts the library returns an updated idToken. I have to reinvestigate this issue.