Great works you are doing, and we are exited to see your app.
About token:
Token expiration is controlled by server session.
Unfortunately, you will not be able to control session expiration as it is based on a specific server configuration and AbanteCart setting.
Even if you set very large expiration time in AbanteCart setting, server session expiration time might be shorter.
Additionally, having unexpired login tokens is not good security approach. This is a standard practice.
To make user experience, better, you can validate the response and redirect user to login if token has expired (unauthorized).
Let me know if you have other suggestions or ideas.
PS. I am not sure about Android, but in iPhone there is a way to store u/p in OS and use finger based login to resubmit authentication and get new token. Possibly there is something on Android side that can help you to make authentication better.
