wait, no, I found the issue. Spotify changed how their refresh token API works.
"A refresh token that can be used to request new access tokens. When refreshing an access token, the response might not include a new refresh token. If it does not, continue using the existing token. See refreshing tokens."