I've found that OAuth returns access token and refresh token expiry dates as unix timestamps but in seconds where as other apis use milliseconds
For example, my call to refresh token returns me "access_token_expiration":1706549066 (10 digits)
where as a POST call to /v1/customers gives me
"created" : 1706547596608, (13 digits)