Hi All,
We have faced a scenario with Ory hydra version 2.1.1 where in if we use a refresh token to renew the access token, that all looks fine we get back a new access token and refresh token, however if use the old refresh token again and try renewing the access token then both the refresh tokens looks to be getting invalidated.
Step 1: Use Refresh token1 to get a new access token - Result - New access token2 and Refresh token2 is getting generated (Expected)
Step 2: Use Refresh token1 again and try to get a new access token - Result - Getting 401 error (Expected)
Step 3: Use Refresh token2 and try to get a new access token - Result - Getting 401 error.
Expectation was Step 3 should have worked as the refresh token 2 is not used earlier.