How can I continue using the API with OAUTH on my site?

Do I have to use the same app token and refresh it once it expired? Or could I just generate a new app token everytime my server makes a request? Could be 100s of times per minute though.