Yes, but it might make sense to provide functionality for both.

For example, in @Coenego's OrcId case, we're constantly fetching a new access token rather than caching it until it expires and then requesting a new one.

That said, it might be hard to get something like that right for all OAuth implementations..