title: Issuing Access Tokens with Passport in limited lifetime
body: <p><strong>Backend</strong> : Laravel api.
  <strong>Frontend</strong>: Angular.</p>
  
  <p>After setting up the Passport package on Laravel i use the regular way to authenticate user then issue token this way :</p>
  
  <pre><code> $newToken = $user-&gt;createToken('myapp')-&gt;accessToken;
  </code></pre>
  
  <p>this works fine but the problem is the token life time is 1 year as it considered <a href="https://laravel.com/docs/5.7/passport#personal-access-tokens" rel="nofollow noreferrer">Personal Access Tokens</a> and as documentation says :</p>
  
  <blockquote>
    <p>Personal access tokens are always long-lived. Their lifetime is not
    modified when using the tokensExpireIn or refreshTokensExpireIn
    methods.</p>
  </blockquote>
  
  <p>my question is how can i issue token for my user inside my application with limited lifetime ?</p>
  
  <p>on the other hand it seems its dangerous to expose <strong><code>client_secred</code></strong> and <strong><code>client_id</code></strong> so i cant call <code>oauth/token</code> from my angular app</p>