Expiring of OAuth2 token

[Rain]

Hello.
An API https://id.twitch.tv/oauth2/token?client_id={0}&client_secret={1}&grant_type=client_credentials returning

{
    "access_token": "top secret string",
    "expires_in": 5015207,
    "token_type": "bearer"
}

what does “5015207” mean? Is this milliseconds or something else?

[Dist]

The expiry is in seconds. So for Implicit OAuth tokens and App tokens the expiration is about 60 days (+/- a few days). For tokens from the Auth Code flow their expiration is about 4 hours, but can be refreshed so is not an issue.

From the docs

Getting OAuth Access Tokens

{
“access_token”: “”,
“refresh_token”: “”,
“expires_in”: <number of seconds until the token expires>,
“scope”: [“<your previously listed scope(s)>”],
“token_type”: “bearer”
}

[Rain]

@Dist

So for Implicit OAuth tokens

what is the implicit token?

[Dist]

Implicit tokens are User tokens that you get through the Implicit auth flow

Getting OAuth Access Tokens

[Rain]

@Dist

The expiry is in seconds. So for Implicit OAuth tokens and App tokens the expiration is about 60 days (+/- a few days).

does this mean that I can get a token once and use it until it is expired?

[Dist]

Yes, you can use a token until it expires or is made invalid (such as the token being revoked, or the user disconnecting from your app if it’s a user token).

[Rain]

what error code is returning when the token is made expired or invalid?

[Dist]

You’ll get a 401 status code if you use an invalid OAuth token.