Where is the best place to store tokens in an OAuth 2 approach?

Question

OAuth

The user is authenticated on the side of the OAuth server. Where is the best place to store received tokens after authentication? If for example to store in session, then for what time? Or if you store it in a table with users, but then after re-authentication from another client, the old (possibly still valid) tokens may disappear.

Answer 1

What prevents to store in the table with communication one-to-many?