@Test
    void verifyRefreshTokenFromAnotherClientId() throws Throwable {
        val request = new MockHttpServletRequest();

        val profile = new CommonProfile();
        profile.setClientName(Authenticators.CAS_OAUTH_CLIENT_BASIC_AUTHN);
        profile.setId(SUPPORTING_CLIENT_ID);
        storeProfileIntoSession(request, profile);

        val response = new MockHttpServletResponse();
        request.setParameter(OAuth20Constants.GRANT_TYPE, OAuth20GrantTypes.REFRESH_TOKEN.getType());
        request.setParameter(OAuth20Constants.CLIENT_ID, PROMISCUOUS_CLIENT_ID);
        request.setParameter(OAuth20Constants.CLIENT_SECRET, RequestValidatorTestUtils.SHARED_SECRET);
        request.setParameter(OAuth20Constants.REFRESH_TOKEN, SUPPORTING_TICKET);
        assertFalse(validator.validate(new JEEContext(request, response)));
    }
This is {@link OAuth20RefreshTokenGrantTypeTokenRequestValidatorTests}.

@author Misagh Moayyed
@since 6.0.0
support/cas-server-support-oauth/src/test/java/org/apereo/cas/support/oauth/validator/token/OAuth20RefreshTokenGrantTypeTokenRequestValidatorTests.java