Usage for unattended automation?

Hi,

I've read that the refresh_token is only valid for up to 90 days, I assume that means I've to reauthorize this app every 89 days, right?
Or is it possible to have a completely unattended automation?