short-lived access tokens for sharing data

Long-lived access tokens and short-lived access tokens both work the same way, just with the exception that short-lived access tokens expire after a few hours, while long-lived access tokens don't. Otherwise, they serve the same purpose. That is, they each identify a particular app-account pair, and enable access to that account via the API to the extent allowed by the configured permissions.

So, you can use a short-lived access token to call the API to generate links the same way you would use a long-lived access token to do so.

I recommend reading the OAuth Guide and authorization documentation for more information on access tokens.