[tptacek]

You can do that, or you can just have a page in the application where the user manually fetches a new API token, which is a pretty common UX for this.