def METHOD_NAME(app, mocker):
    """
    Given a controller method for the get_identity endpoint
      when auth is enabled
      when access token is expired
        and the refresh token is performed successfully
          it should return the identity built from the refreshed tokens
    """
    mock_decoded_access_token = {'user_roles_claim': ['access-token-group'],'username': 'access-token-username','email': 'access-token-email'}
    mock_jwt_decode = mocker.patch('api.PclusterApiHandler.jwt_decode', side_effect=[ExpiredSignatureError(), mock_decoded_access_token])
    mocker.patch.object(api.PclusterApiHandler, 'auth_cookies', {'accessToken': 'refreshed-access-token'})
    mocker.patch('api.PclusterApiHandler.USER_ROLES_CLAIM', 'user_roles_claim')
    with app.test_request_context('/manager/get_identity', headers={'Cookie': 'accessToken=access-token'}):
        identity = get_identity()
    mock_jwt_decode.assert_has_calls([call(ANY), call('refreshed-access-token')])
    assert identity == {'attributes': {'email': 'access-token-email'}, 'user_roles': ['access-token-group'], 'username': 'access-token-username'