Remove refresh_token from OAuth2 result. Return the same access_token as a refresh_token in case when it's requested. Make access_tokens to live forever.

api/components/OAuth2/Events/RequestedRefreshToken.php

@@ -0,0 +1,10 @@
+<?php
+declare(strict_types=1);
+
+namespace api\components\OAuth2\Events;
+
+use League\Event\AbstractEvent;
+
+class RequestedRefreshToken extends AbstractEvent {
+
+}