fix: Expired refreshToken should invalidate session, not check SSO retry task

server/models/UserAuthentication.ts

@@ -105,9 +105,9 @@ class UserAuthentication extends IdModel {
       "authenticationProvider must exist for user authentication"
     );
 
+    try {
       await this.refreshAccessTokenIfNeeded(authenticationProvider, options);
 
-    try {
       const client = authenticationProvider.oauthClient;
       if (client) {
         await client.userInfo(this.accessToken);