Expired refresh token will now require full re-authorisation??

We are in ongoing contact with support over the use of refresh tokens to obtains fresh access/refresh tokens, under the new regime. We have been advised that if a refresh token is not used, it will expire after a week (same as before) BUT a full re-authorisation will be required. This can only be done by an admin user, who may not be readily available. Our clients will not wish to give all our users  an admin role.

 

We have many users of our app who run monthly reports, and have NEVER had to re-authorise. The refresh token just gets new tokens, which are stored, and life goes on.

 

Have we missed something? Has anyone else had the same experience?