title: OAuth Bearer Access Token sliding expiration
body: <p>Let's suppose that we're using OAuth Bearer tokens to secure our API. There is NuGet package with OWIN middleware that will do it for us: <a href="https://www.nuget.org/packages/Microsoft.Owin.Security.OAuth" rel="noreferrer">https://www.nuget.org/packages/Microsoft.Owin.Security.OAuth</a>.</p>
  
  <p>Everethig looks great, until raises question about <strong>access token expiration</strong> - we don't want to force use to re-login over and over again. As far as I understand there are three basic ways:</p>
  
  <ol>
  <li>Make Access Token expiration time very big (1 month for instance)</li>
  <li>Use OAuth Refresh Tokens that adds much difficulties to both Authentication Server and the user application code (described in following article <a href="http://bitoftech.net/2014/07/16/enable-oauth-refresh-tokens-angularjs-app-using-asp-net-web-api-2-owin/" rel="noreferrer">http://bitoftech.net/2014/07/16/enable-oauth-refresh-tokens-angularjs-app-using-asp-net-web-api-2-owin/</a>)</li>
  </ol>
  
  <p>I'm curious is it possible to create the endpoint that will require access token that is about to expire and just answer with new access token to simulate kind of sliding expiration for OAuth Access Tokens?</p>