WebSocket 401 after token refresh despite 200 response

Getting a 401 on the WebSocket right after the tokio task pulls a fresh token. Refresh call at /oauth/token returns 200, so the creds look okay, but the WebSocket handler keeps rejecting the frame immediately after the reconnect attempt. System clock’s synced via NTP.

let token = client.post("/oauth/token")
 .body(refresh_payload)
 .send().await?;
// WS frame rejected immediately

Server logs show a 120-second drift.