Hi @sabeslamidze, welcome to the community!
If I’m understanding you, this sounds like it is working as expected. If the user did not make any requests to the Auth0 server, their session would have ended at the same time the Access token expired. So the API rejects the token as it’s expired, and the user cannot fetch a new token as their session is expired too, so they would need to re-authenticate to get a new session, before they could get a new access token.
If you want to keep the user’s session alive whilst they are using your app, you will need to implement checkSession / getAccessTokenSilently calls (the name can vary between SDKs) to fetch a new token and thus refresh the inactivity timer on their Auth0 session. When you would make these calls would depend on your use case and security needs of your app.
Please see here for some more info on using ‘silent authentication’ to get new tokens without bothering the end user and examples for a couple of our SDKs: