...

In case of an error condition, e.g. if the refresh token is no longer valid, the response will follow the same structure as for other token endpoint errors. The client should discard the refresh token and obtain a new access token using the server-side flow.

Using an access token to access the Archie API

The access token must be passed to the API in the Authorization header, e.g.:

GET hostname${ARCHIE_HOSTNAME}/auth/realms/master/protocol/openid-connect/token  HTTP/1.1

...