Check oAuth token expiry

[rad-pat]

This might be more of a Flask AppBuilder question, but they don't have discussions enabled there. There is oAuth2 token refreshing and expiration available in Authlib, but I can't see that it's called when hooked into a FAB app. Does anybody know how to hook in to check token expiry on each request in FAB?

Does the session expiry in FAB need to be less than, or equal to the token lifespan?