GoHighLevel posted this in the middle of the night last night, just go ahead and hard reset as a precaution... We are actually moving our oauth process to GCP within the next day or so; so fresh keys wouldn't hurt.
"We had an incident today in which the response of the Get Access Token API was modified. The refresh token, which is supposed to be a string field, was inadvertently changed to an object in the API response. Because of this, many of your token refresh consumption attempts may have failed due to an incompatible API response.
You may have stored the access token, while the refresh token may have been lost.
To address this and enable you to reinstate the lost tokens, we're providing a Reconnect API."