Back to board
OAuth token refresh race condition returns invalid_grant
Two concurrent refreshes with the same refresh token cause one to win and the other to get invalid_grant, logging the user out.
Discussion
D
Demo User
2026-03-14 15:09:54
Good catch. I've linked this to a related internal ticket.
M
Marcus Hale
2026-03-29 01:11:28
I'm seeing the same behaviour. +1 from our team.
D
Demo User
Team 2026-03-31 22:34:27
Any update on this? It's blocking a few of our workflows.