api-test: retry token refresh on transient IDP failures

[v-scharf]

problem:

Failed step: Given these users have been created with default attributes:
        cURL error 18: SSL certificate OpenSSL verify result: self-signed certificate (18) (see https://curl.se/libcurl/c/libcurl-errors.html) for https://opencloud-server:9200/konnect/v1/token (GuzzleHttp\Exception\ResponseTransferException)
      | folder/ | /           |

log:

{"level":"error","service":"auth-basic","host.name":"6265023e23a4","pkg":"rgrpc","error":"LDAP Result Code 200 \"Network Error\": dial tcp [::1]:9236: connect: connection refused","time":"2026-09-10T10:18:22Z","message":"could not get ldap Connection"}
{"level":"error","service":"proxy","error":"could not authenticate with username and password user: admin, got code: 15","authenticator":"basic","path":"/graph/v1.0/users/admin","time":"2026-09-10T10:18:22Z","message":"failed to authenticate request"}

Solution:
The admin token is cached ~4 min, so it gets refreshed mid-suite against konnect/v1/token. A brief idm/LDAP (:9236) blip in that window kills the refresh (cURL 18 / non-200) and fails the scenario setup.

Fix in TokenHelper: retry token exchange on transport errors (3x, 1s backoff), and on any refresh failure drop the cache and fall back to a full login.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}