in the returned url, there is a field called `&tempauth=v1.ey123.restData`, if you base64 decode the "ey123" part, you can find the expiry. it is 1 hour.