I found the old refresh token was still sent from one endpoint to our device cloud even though I tried many ways, like disable my skill on Alexa app or webpage, then link account again, or link another account, or disable/enable "test" switch on developer Alexa skill configure webpage. Sometime, the new fresh token was sent again from that endpoint and our device cloud would return ok.
The background is as below:
I'm testing my implementation of Smart Home Skill under developer account. I'm preparing for upcoming certification. Currently, even though it works, I think it's not good to send the expired refresh token to the device cloud.
I'm not sure if it's because I changed the access token URI one time, then I changed it back to previous URI.
I hope someone can help me to resolve this problem or tell me it will not happen in normal case. Thanks in advance.