In many apps, users expect to stay signed in to the app for a long time. Access tokens are short-lived, but you can keep the user signed in by using the refresh token to get new access tokens automatically.