Use refresh tokens if server supports them. Make sure to specify any additional scopes required for refresh token support.