Whether the access token is still valid.
bool isValid({DateTime? now}) { final current = now ?? DateTime.now().toUtc(); return current.isBefore(expiresAt.toUtc()); }