How is the Access Token data updated when it needs to be replaced simultaneously with the Refresh Token?

The refresh of the Access Token along with the Refresh Token usually occurs during authentication, when the Access Token expires or becomes invalid. In this process:

1. The client sends the Refresh Token to the authorization server.
2. The server checks the validity of the Refresh Token.
3. If the Refresh Token is valid, the server issues a new Access Token and, if necessary, a new Refresh Token.
4. The client saves the new tokens and uses the new Access Token to access resources.

In Python, this might look like (a simplified example):

import requests

def refresh_tokens(refresh_token):
    response = requests.post('https://auth.example.com/token', data={
        'grant_type': 'refresh_token',
        'refresh_token': refresh_token,
        'client_id': 'your_client_id',
        'client_secret': 'your_client_secret'
    })
    if response.status_code == 200:
        tokens = response.json()
        new_access_token = tokens.get('access_token')
        new_refresh_token = tokens.get('refresh_token')
        return new_access_token, new_refresh_token
    else:
        raise Exception('Failed to refresh tokens')

# Usage
old_refresh_token = 'old_refresh_token'
access_token, refresh_token = refresh_tokens(old_refresh_token)

Thus, the update of the Access Token and Refresh Token occurs simultaneously to ensure security and session continuity.