How long is the token expired when I get it by web-api
The token is not expired currently. But you can clean old token via a script by checking the create field in api2_tokenv2 table.
Could you add an expiration option? Because expiring keys older than x also is going to logout clients (afaik)
We have a plan to add this option.