Has OAuth (Authorization code grant) default behaviour changed?

[meppolan]

Has current behaviour changed recently? API docs suggest not, but our behaviour is different (https://shopify.dev/docs/apps/build/authentication-authorization/access-tokens/authorization-code-gr...)

We discovered in the past couple weeks that customers were getting unauthorised connections after 24hrs of setting up our app. I eventually discovered that the response returned via OAuth was no giving us an online token instead of an offline one.

To fix this, I've provided the property for an offline token as part of getting an access token, but it was a big problem for existing customers till we were able to add this in.

[meppolan]

What is going on? I specified the offline token to work around this issue, and now all of a sudden, supplying that generates an online one!?!?!? Why are changes like this happening in the lead up to BF?!?