however long you want. For example, if you want sessions to stay alive for 1 month (user will get logged out after 1 month of inactivity), then you have to set the

refresh_token_validity

value to

43800

(1 month in mins).