Difference is that AccessToken is used for a short duration for e.g: while logging in however RefreshToken is used for a longer duration like staying logged in. Refresh Tokens are stored in database and can require access tokens to regenerate refresh...
