Yes. Access tokens will expire after 24 hours. Users will have to re-authenticate after a token has been created and used for 24 hours.