Pub Sub with fully server side authentification

Yes but the refresh_token is not enough to get a new acces_token. You also need the previous access_token.

I’m just asking if we can infinitely refresh the very first access_token obtained or should we use the last one we had?