Tokens are valid for a finite duration. The expires attribute denotes the
time after which the token will automatically become invalid. A token may be
manually revoked before the time identified by the expires attribute; expires
predicts a token's maximum possible lifespan but does not guarantee that it
will reach that lifespan. Clients are encouraged to cache a token until it
expires.