Comment by the8472

You don't need reauthenticate for that, you just need to renew existing tokens. Separate the timeouts for authentication and authorization.