Using OTP for Auth
I am confused about using OTP as an auth workflow. Is this appropriate for mobile applications where a user can stayed signed in indefinitely. (For example, with Instagram after signing in you hardly ever have to sign in again). I know the auth token expires after 24 hours so what is the workflow for dealing with that?
