How long is the token for the web viewer valid or does it ever expire?

A Token is only valid per session. The Session and your Token will expire after 2 hours of inactivity or the moment you do a call to the API's Logout Service.