I have the same question as AngelateStapple. If refresh_token can't be used to obtain access tokens that can be used as authentication tokens, what is the point of the refresh_token? But more importantly, if not with a refresh token, what is the procedure for authenticating apple music api calls for a user after the initial short-lived access token has expired?