Thanks, i took this secret from the example in the documentation
So let’s go for a refresh-token solution.