Hi @edwindwalker,
I recommend referring to our Inactivity Timeout and Refresh Token Exchanges knowledge articles, which address the issue of using refresh tokens.
You may also find our Session Management - Login Issues and Staying Logged In knowledge article helpful.
Let me know if you have any follow-up questions.
Thanks,
Rueben