/upload API that expects a bearer token and then makes a supabase query.getSession() updating the access token, token expires so the reqeust fails.refresh_token is because I was trying to fit in the https://supabase.com/docs/reference/javascript/auth-refreshsession?example=refresh-session-using-a-passed-in-session, but don't think that's possible via the API endpoint anyway without visiting the client.