I would like to ask question from the curiosity perspective and want to share what I have observed for access_token in salesforce ?
I had called https://ap5.salesforce.com/services/oauth2/token, 2 hours before and it was giving me access_token shown below.
After two hours again when I call that endpoint to get the access_token again its giving me the same access_token and using that access_token I can call target systems REST endpoints.
I wonder why salesforce producing the same access_token every-time?
Also I don't see the any validity of access_token coming in the above json response.
I expect normally in OAuth2, whenever you call for the OAuth2 token, you will issue with the new access_token every-time whenever you ask for it. But in salesforce its producing the same access_token, why ?
Also whats the difference between grant_type password and authorization. how they make difference in calling ?