pub async fn refresh_token(
_client: &Client,
refresh: &str,
) -> Result<OAuthCredentials, String>Expand description
Broker refresh: rotate the token pair (no browser). The caller persists the rotated credentials via the provider single-flight gate.