Error catalogue Tokens, context and access

Refresh token rejected

What it means

A refresh token was issued, but using it failed: it may have expired or been revoked, be single-use (rotated on each refresh), or the server may expect client authentication on refresh.

Fix

Check the refresh token lifetime and rotation policy for this client; confidential clients must authenticate on refresh too.

Check it with smart-doctor

Run your login and smart-doctor ranks this cause against the others, with the evidence it found.

npx smart-doctor check my-profile

Already have the server’s error? Explain it without running anything.

npx smart-doctor explain '{"error":"invalid_grant"}'