A common question after authenticating a user with MYOB and receiving the access_tokens and refresh_tokesn is "how long will the tokens last?"
The access_token has a lifetime of 1200seconds from the time it was generated. That is, it will last 20 minutes before it expires and you need a new one.
The refresh_token has a much longer lifetime. It can last for up to 1 full year from the time it was generated. This gives you peace of mind that when your application needs to communicate with your users MYOB company file, you can use the refresh_token to get a fresh access_token and fetch/update the data you need.
Each time you use a refresh_token the authentication server will respond with a payload that looks like this:
We always recommend updating the stored refresh_token because it can change, and this is where the MYOB authentication server would give you a fresh one.