pub const REFRESH_TTL: Duration;Expand description
How long a login lasts, from the moment its first pair was minted.
A login’s absolute end, not the current refresh token’s: rotation mints a
fresh refresh token and leaves this deadline where it was
(didbot_pds::oauth::Lifetimes::refresh), so fourteen days is the most an
agent’s one approval can be spent for. A client that wants longer signs in
again, which puts the whole request back in front of the agent.
Long relative to ACCESS_TTL, by design — the whole point of the split
is that a client spends the refresh token rarely.