pub fn apply_refresh(
session: &OAuthSession,
response: &TokenResponse,
now: i64,
) -> Result<OAuthSession>Expand description
Fold a refresh response into the stored session.
Pure, so the rotation rules are testable without a server — which matters, because every one of them fails as a mysterious logout rather than as an error anyone can trace.