For users that have already logged in prior to you storing their access token, you can invalidate their session and force them to go back through the authentication process. If they haven’t disconnected your app from their Twitch account, the authentication flow can be almost transparent to the user, which is why there are a lot of sites that use a short session length and just send the user back through the login flow each time as an easy method of token validation.