As @Danp said, changes appear first in the GitHub repo and are available for the XOAs at the next release in the latest channel.
But, as it appear, we just did a new patch release (5.91.2) which also contains the REST API changes we talked about
@dan89 Yes, you can pass the --expires flag to change the validity of a token. But you cannot go above maxTokenValidity though you can increase it in your xo-server's config.
Example:
xo-cli --createToken --expiresIn 90d https://XOA.company.lan admin password