# Nakama is not returning a new refresh token

**URL:** <https://forum.heroiclabs.com/t/nakama-is-not-returning-a-new-refresh-token/4450>\
**Category:** Runtime Framework\
**Tags:** server-framework, golang, lua\
**Created:** [October 12, 2023, 8:15am UTC](https://forum.heroiclabs.com/t/nakama-is-not-returning-a-new-refresh-token/4450 "2023-10-12T08:15:54Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![UmarBhatPlaystrom](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.heroiclabs.com/umarbhatplaystrom/32/1635_2.png) [@UmarBhatPlaystrom](https://forum.heroiclabs.com/u/UmarBhatPlaystrom)\
**Post date:** [October 12, 2023, 8:15am UTC](https://forum.heroiclabs.com/t/nakama-is-not-returning-a-new-refresh-token/4450/1 "2023-10-12T08:15:54Z")

</div>

I am using Unity SDK and calling SessionRefreshAsync returns a new Session object with updated auth token, but old refresh token (basically returning refresh token that I passed to the method).  
Then I thought maybe the problem lies in Unity SDK, so I tried ApiExplorer and got the same result.

 ![image](https://us1.discourse-cdn.com/flex020/uploads/heroiclabs/original/2X/f/f7796e46182318836214a59f927b26aaf2482b86.png)

Here it returns a new auth token, but old refresh token.

---

<div class="post-metadata">

**Author:** ![sesposito](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.heroiclabs.com/sesposito/32/2594_2.png) [@sesposito](https://forum.heroiclabs.com/u/sesposito)\
**Post date:** [October 12, 2023, 9:16am UTC](https://forum.heroiclabs.com/t/nakama-is-not-returning-a-new-refresh-token/4450/2 "2023-10-12T09:16:23Z")

</div>

This is being addressed in [Add refresh token rotation by sesposito · Pull Request #1091 · heroiclabs/nakama · GitHub](https://github.com/heroiclabs/nakama/pull/1091) and is planned to make it in the next release.

Best.