OAuth secret rotation race condition on CXone

Getting 401 Unauthorized immediately after updating the client secret via PUT /api/v2/integration/oauth-clients/{id}. The new secret works in Postman but fails in our Python app within the 30-second update window.

  • Using Python requests library for token refresh
  • Updating secret via REST API
  • App retries immediately on 401

Is there a propagation delay or a specific header I’m missing to force the auth service to recognize the new hash instantly?