Do you always generate access token per request?

Do you always generate access token per request?

Do you always generate access token per request? Isn't that a hassle? Is there any workaround on this?