Understand how to correctly implement TLS pinning and concurrent token refresh in iOS networking.
Your app pins the server's leaf certificate and stores OAuth tokens for API calls. Which approach is the most robust and secure for a production iOS app?