Question: what is the difference between access token and refresh token?
Answer: The difference between a refresh token and an access token is the audience: the refresh token only goes back to the authorization server, the access token goes to the (RS) resource server. ... Refreshing the access token will give you access to an API on the user's behalf, it will not tell you if the user's there.