# Receiving “Token could not be decoded or is missing in DB” even with refresh token rotation disabled

**URL:** <https://community.auth0.com/t/receiving-token-could-not-be-decoded-or-is-missing-in-db-even-with-refresh-token-rotation-disabled/187057>\
**Category:** Get Help\
**Tags:** reusable-refresh-tokens, sessions\
**Created:** [May 22, 2025, 7:03am UTC](https://community.auth0.com/t/receiving-token-could-not-be-decoded-or-is-missing-in-db-even-with-refresh-token-rotation-disabled/187057 "2025-05-22T07:03:42Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![MertYacan](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/mertyacan/32/74919_2.png) [@MertYacan](https://community.auth0.com/u/MertYacan)\
**Post date:** [May 22, 2025, 7:03am UTC](https://community.auth0.com/t/receiving-token-could-not-be-decoded-or-is-missing-in-db-even-with-refresh-token-rotation-disabled/187057/1 "2025-05-22T07:03:42Z")

</div>

I’m using Auth0’s Refresh Token Grant in a desktop (native) application and have explicitly **disabled** Allow Refresh Token Rotation in my tenant settings. However, a few users received this error:

**What I’ve verified so far:**

- Rotation is **off** in the dashboard under \*\*Applications → My Native App → Allow Refresh Token Rotation
- I’m storing and re-using the exact RT that Auth0 returned on initial authentication.
- No Management API calls have been made to revoke grants programmatically.

**Environment Details:**

- **App Type:** Native/Desktop (not SPA)
- **Tenant Region:** us
- **Set Idle Refresh Token Lifetime:** Disabled
- **Set Maximum Refresh Token Lifetime:** 30 Days
- **Allow Refresh Token Rotation:** Disabled

**Questions:**

1. Could the “Set Maximum Refresh Token Lifetime” setting still be in effect, even though “Allow Refresh Token Rotation” is disabled, and be causing this error after 30 days have passed since the user received the refresh token?

---

<div class="post-metadata">

**Author:** ![ekozdemir12](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ekozdemir12/32/74200_2.png) [@ekozdemir12](https://community.auth0.com/u/ekozdemir12)\
**Post date:** [May 22, 2025, 7:20am UTC](https://community.auth0.com/t/receiving-token-could-not-be-decoded-or-is-missing-in-db-even-with-refresh-token-rotation-disabled/187057/2 "2025-05-22T07:20:38Z")

</div>

I am having the same issue, any help would be really impactful.