Possible/Supported values for token expires_in

[sanmitha]

I understood the default value for token expires_in is 8hrs. 
What are the other supported values for expires_in ?
Is it possible to set values less than 8hrs, as I want to test the refresh token mechanism incase of access token expired ? 

Thanks 

[JohnFitbit]

Hi @sanmitha,

The token duration for an access_token under the authorization code grant flow is a non-negotiable 8 hours.

If you are using the implicit grant flow (not recommended), then you can set the expires_in value up to a year (in seconds), but as mentioned, this flow is not recommended due to its security vulnerabilities.