I don’t understand how to update JWT, refresh token, what is unusual about it?

Question

JSON Web Token

There is a token with a user ID.
There is a refresh token.
When the token expires, we use the refresh token to refresh the user's token.
It is also written in theory that if the user's token is hacked, then the refresh will not allow the attacker to update and work further.
But a question. What is the difference between a regular jwt token and a jwt refresh token.
Why just do the obsolescence of the token, if it steals the usual one, then it will steal the refresh token.
Or should it be stored in some other way.
I do not understand the principle of its protection.

Answer 1

I do not understand the principle of its protection.

refresh token is not given to everyone.