In plain language
When the short-term pass expires, the app trades the refresh token for a new one behind the scenes.
Example
An automation’s Google connection keeps working for months because the platform uses a refresh token each time the access token expires.
Related terms
Access Token · OAuth · Authentication · OAuth Scope
Common misconception
A refresh token does not last forever; revoking access, changing a password, or long inactivity can invalidate it and break the connection.
Implementation guidance
Store refresh tokens as secrets, handle refresh failures with an alert to reconnect, and use an account that will not be deactivated when staff change.