How to recognize refresh token in asp.net core?

Question

ASP.NET

For authorization I use a pair of access token and refresh. There is such a situation that instead of access, the user can send a refresh token in normal calls to the API, which is dangerous, since the life of the refresh token is much longer. How not to skip the refresh token in regular methods? There was an idea to push into the payload whether it is a refresh or not, but there must be a better way?

Answer 1

Well, as if the access token is invalid, it should return 401 status and not let it go further