I have encountered an instance where a user in my system has changed their Atlassian ID email address.
Unfortunately, the refresh token now does not return a valid access token for my application to make requests with. The error I get back is:
{
"error": "invalid_grant",
"error_description": "Unknown or invalid refresh token."
}
Surely this isn't expected behaviour? A change in email doesn't mean that the user has revoked access to an oauth application