The response when you get the token returns an expires_in which in seconds is when the token expires
Depends on the token type, regular user tends to be four hours, implicit auth and app access 60 days
No.
App access tokens, just generate another one.
User tokens you get a refresh token you can use