This will always be true. The tokens only last one hour. rclone should fetch a new one using the refresh token when needed.
This isn’t what I see - rclone uses the refresh token to fetch a new token and it all works fine…
The first thing to do would be for you to post a log with
rclone -vv lsd onedrive: of the authentication failing, then we can start to debug.