Password Reset Token

Hello.

I cannot find this information in the documentation:

When a ADX Portal user attempts to reset his/her password (via LoginController\ForgotPassword), I understand that a unique token is generated as part of the reset process.

Question: How long is the token valid for?

What factors will make the token invalid? (e.g. Another token request? x minutes?)

Thank you!

Steve