Hi @khawmingsheng,
Thank you for your reply and clarification.
What you have observed is an existing session with an old state. In this case, the session would need to be “refreshed” since the user that was previously (and still) logged in has an access token with the claims issued at the time of authentication.
For this, I recommend using reading our Refresh Tokens documentation get a new access token with the updated claims without user interaction.
Please let me know if you have any additional questions.
Thanks,
Rueben