One of the ideas behind the OAuth system is that the resource provider xan check the validity of your auth token and read its claims but NOT issue you a token itself. For that you need to go back to the auth provider and request one with either your username/password or your refresh token.

if your resource providers automatically issue a new token when they recive an expired auth token, effectively you ha e no expirey.

Plus resource provider 2 will have to trust resource provider 1 rather than just the auth service

One of the ideas behind the OAuth system is that the resource provider can check the validity of your auth token and read its claims but NOT issue you a token itself. For that you need to go back to the auth provider and request one with either your username/password or your refresh token.

if your resource providers automatically issue a new token when they recive an expired auth token, effectively you ha e no expirey.

Plus resource provider 2 will have to trust resource provider 1 rather than just the auth service