Emit a TokenRefreshedEvent when the login token is refreshed

lib/Event/TokenRefreshedEvent.php

@@ -0,0 +1,46 @@
+<?php
+
+/**
+ * SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+declare(strict_types=1);
+
+namespace OCA\UserOIDC\Event;
+
+use OCA\UserOIDC\Db\Provider;
+use OCP\EventDispatcher\Event;
+
+/**
+ * This event is emitted with the raw token information when the login token is refreshed
+ *
+ * It may be used for further handling of oidc authenticated requests
+ */
+class TokenRefreshedEvent extends Event {
+
+	public function __construct(
+		private array $oldToken,
+		private array $newToken,
+		private Provider $provider,
+		private array $discovery,
+	) {
+		parent::__construct();
+	}
+
+	public function getOldToken(): array {
+		return $this->oldToken;
+	}
+
+	public function getNewToken(): array {
+		return $this->newToken;
+	}
+
+	public function getProvider(): Provider {
+		return $this->provider;
+	}
+
+	public function getDiscovery(): array {
+		return $this->discovery;
+	}
+}

lib/Service/TokenService.php

@@ -13,6 +13,7 @@
 use OC\Authentication\Token\IProvider;
 use OCA\UserOIDC\AppInfo\Application;
 use OCA\UserOIDC\Db\ProviderMapper;
+use OCA\UserOIDC\Event\TokenRefreshedEvent;
 use OCA\UserOIDC\Exception\TokenExchangeFailedException;
 use OCA\UserOIDC\Helper\HttpClientHelper;
 use OCA\UserOIDC\Model\Token;
@@ -276,6 +277,13 @@ public function refresh(Token $token): Token {
 
 			$bodyArray = json_decode(trim($body), true, 512, JSON_THROW_ON_ERROR);
 			$this->logger->debug('[TokenService] ---- Refresh token success');
+
+			$this->eventDispatcher->dispatchTyped(
+				new TokenRefreshedEvent(
+					$token->jsonSerialize(), $bodyArray, $oidcProvider, $discovery
+				)
+			);
+
 			return $this->storeToken(
 				array_merge($bodyArray, ['provider_id' => $token->getProviderId()])
 			);