Callback invoked after every successful automatic MAL token refresh so
callers can persist the new access/refresh token pair.
The callback fires once per refresh grant. Concurrent 401s share one grant
and one callback invocation. The response follows MAL's
rotation semantics: when the token endpoint omits refresh_token, the
coordinator keeps the stored one, and the response passed to the callback
carries the effective refresh token. Exceptions thrown by the callback
are reported through onHookError (falling back to a console warning)
and never abort the replayed request.
Callback invoked after every successful automatic MAL token refresh so callers can persist the new access/refresh token pair.
The callback fires once per refresh grant. Concurrent 401s share one grant and one callback invocation. The response follows MAL's rotation semantics: when the token endpoint omits
refresh_token, the coordinator keeps the stored one, and the response passed to the callback carries the effective refresh token. Exceptions thrown by the callback are reported throughonHookError(falling back to a console warning) and never abort the replayed request.