and if are being asked to refresh this soon, they likely didnt even implement refresh tokens, so the access token only last 3 hours