Four Ways a Refresh Token Request Fails — Only One Means Trouble

A refresh token exists for one reason: exchange itself for a new access token, once, and then stop being useful. Everything about a good implementation follows from taking "once" literally. This one d