In case of OAuth2 and OpenID Connect user authorized AppA to access AppB service. Now AppB needs to access AppC and it uses the bearer token received from AppA (suppose the scope of that token included both B & C):
AppA -Bearer-> AppB -Bearer-> AppC
But what if AppB needed access to AppC for long time (some polling happens for couple of hours). The Bearer token is revoked by that time and AppB doesn't have refresh token (AppA has). What are the options here?