what is the difference between an access token and Refresh token in Salesforce?

The difference between a refresh token and an access token is the audience: the refresh token only goes back to the authorization server, the access token goes to the (RS) resource server. Refreshing the access token will give you access to an API on the user’s behalf, it will not tell you if the user’s there.