To refresh token, I am making a synchronous API call here.

If a request failes due to UNAUTHORIZED ACCESS exception, in that case it will first make a separate API call to refresh the token which is not concurrent.

It is just a trade off in our use case over here.