Session logout not work after refresh access token

[RacceGatel]

I have Hydra and Kratos. My SPA application works via OAuth2 at/rt/id_token, meaning it's a public client and also has openid, offline_access scope. After the login flow, it receives an id_token (with at/rt), which has a "sid" claim. But after the token refreshes, the next id_token no longer has a "sid" claim, causing the /oauth2/sessions/logout call to fail with the error "Logout failed because query parameter id_token_hint is missing sid claim."

Please explain how this is supposed to work. Thanks.