Duplicate token refreshes when multiple Axios requests receive 401
Goal Design a least‑privilege authentication flow where each Axios request carries only the scopes it needs and expired credentials are refreshed transparently. Constraints Axios provides per‑request auth config and response interceptors, but it lacks a built‑in queue or deduplication mechanism for token refresh. When several concurrent requests encounter a