In traditional web applications, access tokens are typically set with short expiration periods (such as 15 minutes to 1 hour), combined with refresh tokens to achieve seamless renewal.