exp claim that contains a NumericDate (a Unix timestamp in whole seconds, UTC, since 1970‑01‑01T00:00:00Z). The token is rejected once the current time is at or past exp. When it expires, you must acquire a new access token.scp claim where permissions are stored.Permissions for an access token are inherited from the import token used to create it