As the default implementation, the token will not expired. There is a community PR to add the refresh token functionality in the authentication-jwt extension. It might be close to land, so might want to keep an eye on that.