I'm writing an android app. The algorithm to log in user ->

• create request token
• approve it
• create access token (also save from it account_id)
• create session id (from v4 token)

To keep user logged in i don't need to recreate these steps? If i do need. How to do it without user approving token (step 2)?

If don't i only get account_id & session_id from local to be able do requests?

Also how long session_id live, until i delete session?