class Aws::SSOCredentials

def refresh
  c = if @legacy
        cached_token = read_cached_token
        @client.get_role_credentials(
          account_id: @sso_account_id,
          role_name: @sso_role_name,
          access_token: cached_token['accessToken']
        ).role_credentials
      else
        @client.get_role_credentials(
          account_id: @sso_account_id,
          role_name: @sso_role_name,
          access_token: @token_provider.token.token
        ).role_credentials
      end
  @credentials = Credentials.new(
    c.access_key_id,
    c.secret_access_key,
    c.session_token,
    account_id: @sso_account_id
  )
  @expiration = Time.at(c.expiration / 1000.0)
end