What is a refresh token and why is it used with access tokens?

Sample answer preview

A refresh token is a long-lived token used to obtain new access tokens without requiring the user to log in again. The problem it solves is this. Access tokens should be short-lived, fifteen minutes to an hour, to limit damage if a token is compromised.