Do user access tokens expire?

[BarryCarlyon]

@julienkay

• User access tokens do not expire. You should validate them on a per-session basis to make sure that when a user removes authorization for your app, you stop using that token.
• App access tokens expire after a certain time. You have to make sure to refresh them, which basically means getting a new token.

Both the validate endpoint and original token fetching JSON blobs, will contain an expires_in key which tells you in how many seconds that token will die. Refresh tokens don’t expire, but may change when you refresh