/token not returning the new refresh token

[digoburigo]

I want to know if when a make a POST request to /token with grant_type=refresh_token, the next time I do a GET in /token the old refresh_token it's returned instead of the new one. Is someone having this issue too?

[Gr3at]

is GET even allowed in the /token endpoint? Tried to reproduce your issue, but getting HTTP 405 when making a GET request on that endpoint.

[Urth]

According to https://openid.net/specs/openid-connect-core-1_0.html#TokenRequest Token Requests only allow POST.