OAuth connection and token lifecycle management for SaaS apps: encrypted credential storage, automatic refresh, refresh token rotation, one refresh at a time and reauthorization that keeps the connection id.