exp claim that contains a NumericDate (a Unix timestamp in whole seconds, UTC, since 1970‑01‑01T00:00:00Z). The token is rejected once the current time is at or past exp. When it expires, you must acquire a new Access token.scp claim where permissions are stored.Permissions for an Access token are inherited from the Login token used to create it