A cloud-based identity and access management service for securing user authentication and resource access
Angular MSAL Token Refresh
I’m using the Microsoft Graph API to change the AppRoleAssignments for users in order to manage their roles from the backend. After updating the roles, I signal Angular MSAL to refresh the token using 'acquireTokenSilent' with 'forceRefresh'. However, the new token still contains the old role(s) in the claims.
When I change the roles again and trigger 'acquireTokenSilent', this time the new claims do not include the previous role(s). But still they will include the just deleted role(s) (same thing for adding a new role). It feels like I'm always one step behind. The same issue occurs with 'loginRedirect'.