Auth Code

Auth codes are one-time use codes. Therefore, they expire immediately after use or within 15 minutes when unused.

Access Token

Access Tokens are short-lived tokens that expire 60 minutes after being issued.

Refresh Token

Refresh Tokens are granted when exchanging an Auth Code. They are intended to be lifetime tokens that can be used to request access tokens. As a result, they only expire if unused for 90 days.