ErrorsSupabase Auth
Invalid Refresh Token
The stored session is no longer usable
The app tried to renew its session with a token the server will not accept — already used, revoked, or from a different project.
Why it happens
In an AI-built app, specifically
Most often a leftover session in the browser after the project changed or its keys rotated. The browser still has a token from before, and it can never be renewed. It also appears when two tabs refresh at once and one of them loses the race.
Steps
How to fix it
- 01Sign out, or clear site data for the domain, then sign in again. That removes the stale token.
- 02If it recurs for real users, make your app sign out and redirect to login when refresh fails, rather than leaving them on a broken page.
Still stuck
If the steps did not do it
An error is one symptom, and the cause is often somewhere else entirely. The broken-app check reads your published site and looks at everything at once — and if it cannot tell either, connecting your repository is what lets Refinar read the code and fix it.
Nearby errors