Genesys OAuth 401s after token refresh despite valid expiry

Hey folks,

Hit a weird one with our Python auth script. The refresh token works fine, but the new access token gets rejected with 401 Unauthorized for about 2 minutes. Checked the JWT payload and the exp claim is definitely in the future.

Suspect clock skew between our app server and Genesys. Is there a standard tolerance buffer we should account for in the validation logic, or is this just a server-side quirk? Here’s the error response we’re seeing.

Genesys enforces a strict 30-second clock skew tolerance per their auth docs. Sync your server time via NTP and stop guessing.