2021-06-16 UTC
# 
barnaby I was just a bit freaked out when reading through the description here https://www.oauth.com/oauth2-servers/access-tokens/refreshing-access-tokens/ where you just have this eternal refresh token which can be exchanged for access tokens potentially without a client secret