I want my clients to be able to schedule a purchase for a given date. When they perform this scheduling action, they are authenticated with an oauth2 token. However the date could be so far from now that the token might have expired when the purchase is triggered. I need to check the user identity and whether they still can perform the purchase when it is triggered, not when it is scheduled.
What would be the best practice to be able to perform this scheduling action ? Should I increase the refresh token expiring date, so that the token can be refreshed before performing the check, when it is triggered ? I have seen other people do this (ex: here), but I don't know if it is a best practice to increase to, say, 2 years, if I want my clients to be able to schedule a purchase for 2 years.