OIDC access/refresh token changes with OIDC OP v4?

[Cantor, Scott]

> Out of curiosity, what would we see in the IdP log if the client
> requested a new access token using the refresh token? And
> more importantly, would what also would we see if the IdP
> said the refresh token was invalid?

I would, as I said, turn that around. The RP should have logs too and it should know what it's trying to do, how often, etc.

-- Scott