bug: Refresh Token Flow Not Working After Updating Roles

[anshpreet3101]

Describe the bug

I am using the management API to update the roles of a user. The roles get updated successfully on the server. However, when I refresh the token to get the updated roles using getRefreshToken() method , the roles in the token remain the same as before. Only the expiry time is updated, while the roles and other data remain unchanged.

Expected behavior

The new token should reflect the updated roles from the authentication server.
Roles Updates when user redo the browser based signIn process.

How to reproduce?

• Authenticate a user using Logto in an Expo application.
• Change the user's roles on the authentication server using Logto Management API.
• Refresh the token in the Expo application using getRefreshToken().

Context

• Logto Cloud
• Self-hosted, Logto version = 1.2.0
  • Container (Docker image)
• Raw Node.js