When refreshing an Access Token the expire_in value is not inherited, and the default 3600 is used instead, making it so that the token expires after only one hour. Additionally the UI doesn't seem to represent the new value.
Reproduce steps:
- Create Access Token authenticating with an admin user and expire_in of one week
- Check the token with the GET command and make sure this is the expiry
- Refresh the token, only passing the access and refresh tokens
- Check the token again, the expiry will show one hour after the new creation time
Workaround: pass the expire_in value as part of the refresh call.