Like how azure has a refresh token, gcloud also have a refresh token that can be used to get new access token https://cloud.google.com/docs/authentication/token-types