diff --git a/packages/apptive_grid_core/CHANGELOG.md b/packages/apptive_grid_core/CHANGELOG.md
index eee56b91..f76cd253 100644
--- a/packages/apptive_grid_core/CHANGELOG.md
+++ b/packages/apptive_grid_core/CHANGELOG.md
@@ -1,3 +1,7 @@
+## 2.3.3
+
+ - **FIX**: An expired refresh token no longer locks the user out. The ApptiveGrid auth server rejects it with a plain-text 401, which `openid_client` throws as an `HttpRequestException` rather than an `OpenIdException`, so since 2.3.1 the dead credential was kept and every login attempt failed with `token expired`. Client errors from the token endpoint (except 408 and 429) now count as a rejected credential, both when restoring the saved credential and when refreshing an expired token: token and credential are cleared and, with `autoAuthenticate`, the login opens (#165).
+
 ## 2.3.2
 
  - **FIX**: Signatures are uploaded through the `uploadUri` link as well. The link of the signature field is preferred over the one of the form, and the url the server assigns is written back into the `SignatureDataEntity`, so a submitted signature no longer points at the client generated url where no file was uploaded (#163).
diff --git a/packages/apptive_grid_core/pubspec.yaml b/packages/apptive_grid_core/pubspec.yaml
index abee5310..59fd20be 100644
--- a/packages/apptive_grid_core/pubspec.yaml
+++ b/packages/apptive_grid_core/pubspec.yaml
@@ -1,6 +1,6 @@
 name: apptive_grid_core
 description: Core Library for ApptiveGrid used to provide general ApptiveGrid functionality to other Packages or Apps
-version: 2.3.2
+version: 2.3.3
 homepage: https://www.apptivegrid.de
 repository: https://github.com/ApptiveGrid/apptive_grid_flutter/tree/main/packages/apptive_grid_core