HUMAN VERIFICATION REQUIRED ASVS 10.4.8 Refresh-token expiration (when oauth_oidc is used)

MB-C16 ASVS Level 2 Contextual Human Assurance High

Refresh tokens have an absolute expiration, including if sliding refresh token expiration is applied.