If it expires, you need to get the data again, use a new one, that is, get the verification code again and fill it in in time. This package will definitely expire and need to be refreshed.
An expired token indicates that the certificate has expired, and so on.
You need to get the code again, and then get the access token, that is, to call the authorization interface again, you need to refresh the access token with the refreshtoken. If you get new access tokens, refresh tokens and expired tokens, you need to replace the data in the association table with these new tokens.
It is recommended that you use a refresh token every time you log in. Tokens represent identity tokens in the Internet industry. It is a certificate distributed by the system on behalf of the user after the user logs in.
This certificate is valid. If the time limit is exceeded, this token will be invalid. To solve this problem, if it is a mobile phone, just log off and log on again.
Access tokens are valid for one month, and refresh tokens are valid for two months.
The so-called long-term effectiveness means constantly refreshing Accesstoken and refreshtoken to obtain new ones. In other cases, the refreshtoken is invalid unless the user has not accessed the application for two months, and then the user needs to log in again.