service · inferred from evidence
Xero
A hosted accounting service that provides OAuth2 authentication and token rotation for API access.
- Xero `invalid_grant` about a week after connecting: refresh token rotation not persisted
You are using a stale refresh token. Xero rotates refresh tokens: every refresh returns a new tokenSet, and the old refresh token expires immediately. If you keep refreshing with the refresh token from the original tokenSet instead of the n