Just rotated the client secret on the integration but the existing token is still valid for another hour. The new secret fails with a 401. Is there a grace period where I need to refresh the token immediately or wait for expiry? Here is the error payload.
{
"error": "invalid_grant",
"error_description": "The provided authorization grant is invalid, expired, or revoked"
}