undefined

points

[-]

doesn't the token has an expiry window though? if you're using oidc/sso with aws for example it is short lived and can be revoked

[-]

The refresh token is often going to be good for a week, even if the access token isn't.