i'm trying to get a smart home skill certified for WWA. But, I'm confused about token management when I have to report a state change or an endpoint change from my API.
My understanding is that when a user links their account, the Alexa app retrieves and manages the token and refresh token. But, I need to use this token when I send change ChangeReport, AddOrUpdateReport, and DeleteReport events. I can get this token in Lambda and send it to my API to store for future calls to the Alexa API, but what happens if that token expires? From what I've read, Alexa API does not return the refresh token from the OAuth2 exchange. It also seems a little awkward to use the oauth token when my back end should be managing the user authentication in the first place.
I must misunderstand something, any help is appreciated.