# oauth_token_replay

> HTTP 409 · https://cogdepot.com/problems/oauth_token_replay

The same OAuth token (its jti) was already used to finalize. The jti is a one-time lock on the finalize step, so the replay seals nothing - mint a fresh token and check whether the first finalize succeeded before retrying.