User authorization tokens for long-term use

Question

I want to issue tokens with user permissions and utilize these tokens for an extended period.

The flow would likely be as follows:

1. When a user logs in, the server issues an access_token and a refresh_token.
2. For each API request, the client includes the access_token in the header.
3. When the access_token expires, the client uses the refresh_token to request a new access_token from the server.
4. The server verifies the refresh_token and issues a new access_token and refresh_token.
5. The client continues API requests with the new access_token in the header.

My question is: Is there a limit to the number of times a refresh_token can be issued? Or are there any other specific constraints? I couldn't find information about limitations on refresh_token issuance in the official documentation. If you have any related answers or links, please let me know!

Would you like me to provide any information or thoughts on this topic?