Add refresh call in BigFramesHelper authz flow (#1336)

Author: colin-rogers-dbt

dbt-bigquery/.changes/unreleased/Fixes-20250915-095308.yaml

@@ -0,0 +1,7 @@
+kind: Fixes
+body: Ensure we have exchanged a refresh-token for a token prior to detemining notebook
+  user in BigFrames
+time: 2025-09-15T09:53:08.063964-07:00
+custom:
+  Author: colin-rogers-dbt
+  Issue: "1219"

dbt-bigquery/src/dbt/adapters/bigquery/python_submissions.py

@@ -216,6 +216,18 @@ def __init__(self, parsed_model: Dict, credentials: BigQueryCredentials) -> None
             model_timeout=parsed_model["config"].get("timeout") or _DEFAULT_BIGFRAMES_TIMEOUT
         )
 
+    def _get_token(self) -> str:
+        """Get a token from the credentials.
+        If a token is not supplied by the user directly it is lazily created the first time we authenticates.
+        BigFrames needs a token to determine the execution user but a call may not have
+        """
+        creds = self._GoogleCredentials
+        if creds.token:
+            return creds.token
+        else:
+            creds.refresh()
+            return creds.token
+
     def _py_to_ipynb(self, compiled_code: str) -> str:
         notebook = nbformat.v4.new_notebook()
         # Put all codes in one cell.
@@ -332,7 +344,7 @@ def _config_notebook_job(
                 response = request(
                     method="GET",
                     url="https://www.googleapis.com/oauth2/v2/userinfo",
-                    headers={"Authorization": f"Bearer {self._GoogleCredentials.token}"},
+                    headers={"Authorization": f"Bearer {self._get_token()}"},
                 )
 
                 if response.status != 200: