Bespoke execution on token refresh (flow?)

Using 9.0.2 - We have bespoke script executions that augment the token with information, about the authenticated user, from external API’s. We would like to have the refreshed token execute the same or similar scripts to update the token with refreshed information from those APIs without the user having to go through the login process again to go through the authentication flow and get a brand new token.

Short version: We need to have executions fire on token refresh. How can we do this?

Thanks in advance.
Tom.