Only the initial authorization requires user interaction, the application can refresh access tokens unattended.