Seeing a few conflicting things online - do Netsuite's refresh tokens expire? Trying to use an OAuth flow for querying a RESTlet externally, but some documentation says the refresh token expires after 7 days, requiring a manual re-auth by the original user, while others say they don't expire. Is that true? If so, what is the best method to keep a persistent connection within Netsuite?

Thank you @battk! It looks like step 2 of TBA requires a manual "authorization" by the user by accessing that particular login path. Once that step occurs, is the result in step 3 something that can be continuously used? I've worked heavily with OAuth 2.0 so just used to having to deal with refreshing access tokens....

The Three-Step TBA Authorization Flow is similar to the OAuth 2.0 Authorization Code Grant Type

I guess I'm trying to understand - is TBA subject to the same sort of expiration that OAuth 2.0 is? Or is the code that's generated longer lasting and won't require a refresh / reauth every X days?

no expiration in TBA

Excellent, thank you!