I don't know how the enterprise / API version does it, but if you share the basic app access with the desktopp version, they are pretty hysteric about re-validations all the time. I guess the authorisation on API/Enterprise users will time out similarly and if no one is around to scan QR codes or what ever method they use, I think enterprise/API apps also just shut downs.