Refresh tokens are the credentials that can be used to acquire new access tokens.
The lifetime of a refresh token is much longer compared to the ...
For further actions, you may consider blocking this person and/or reporting abuse
Where do you get the credentials to request a new fresh token?
Do you redirect user to the login form again?