Any reply to this? I think I am dealing with the same problem somehow. Documentation here says to use the refresh function… but with token rotation I would expect to also get new refresh_token on the response, but it is missing. So next time I want to refresh the token… I do it based on invalid refresh_token as it was already used. I am totally lost here in how to use token rotation with express-open-id-connect.
I always end up with error invalid_grant (Unknown or invalid refresh token.)