Hello,
I’ve built an integration for Vercel and users can install it through the url that allows to prompt the user to install an integration on one or all of their projects. When they install the integration, I receive an authorization code that I exchange for an access token to access their projects.
The Issue: As with standard OAuth implementations, I’m concerned that this access token may expire over time. If it does, I would need users to reinstall the integration to regain access, which creates a poor user experience for something they’ve already installed once.
What I Need: I’d like to understand the access token lifecycle for Vercel integrations:
How long does an access token remain valid?
Does the token exchange response include a refresh token that I can use to obtain new access tokens without requiring the user to reinstall?
What is the recommended approach for maintaining persistent access to user projects after the initial integration installation?
I want to ensure my integration can function reliably long-term without repeatedly asking users to reinstall it.
Thank you for your guidance!