Token refresh fails with error "os_authType was 'any' and an invalid cookie was sent."
Since upgrading to Confluence Data Center 9.2.8 from 9.2.7 we are failing to obtain an access token using the authentication flow outlined here.
We are able to pass the consent stage to obtain an initial token but all subsequent requests using the refresh token fail with a tomcat error stating "os_authType was 'any' and an invalid cookie was sent.".
We are failing to understand where a cookie comes into play during an OAuth flow.
