and the good part is that even if the refresh token is 100 days, but the access token is say 1 day, the lifetime of both of these tokens is effectively 1 day assuming that the user is active.