Just a brief addition to this as a user of APIs. Allow me to create a new token and have two tokens for the same account. This makes rotation of tokens without loss of service possible :)
e.g. You can request a second token, but doing so immediately sets the currently active token to expire and be deleted in X days.