MSAL Token Expires after a day

Question

Here's the code I'm using

-----------------------------------------------------

const msalConfig = {
auth: {
clientId: process.env.MICROSOFT_CLIENT_ID,
authority: process.env.MICROSOFT_AUTHORITY,
clientSecret: process.env.MICROSOFT_CLIENT_SECRET,
},
system: {
loggerOptions: {
loggerCallback(loglevel, message, containsPii) {
console.log(message);
},
piiLoggingEnabled: false,
logLevel: msal.LogLevel.Verbose,
},
},
};

const msalClient = new msal.ConfidentialClientApplication(msalConfig);

const tokenRequest = {
code,
scopes: process.env.MICROSOFT_SCOPES.split(","),
redirectUri: process.env.MICROSOFT_REDIRECT_URL,
};

const response = await msalClient.acquireTokenByCode(tokenRequest);

const msalTokenCache = msalClient.getTokenCache();

const account = await msalTokenCache.getAccountByHomeId(homeAccountId);

const response = await msalClient.acquireTokenSilent({
scopes: [
"user.read",
"calendars.readwrite",
"mailboxsettings.read",
"offline_access",
],
forceRefresh: false,
redirectUri: "https://www.needtalk.com/settings/connections/outlook",
account,
});

const { idToken } = response;

-----------------------------------------------------

After that, I try to get a new token from the following endpoint:

https://login.microsoftonline.com/common/oauth2/v2.0/token

But then I get the following error

error: {
code: 'InvalidAuthenticationToken',
message: 'CompactToken parsing failed with error code: 80049217',
innerError: {
date: '2022-08-12T03:33:46',
'request-id': '9f90ea05-2d9e-41a1-b6fc-3d53c2f67501',
'client-request-id': '9f90ea05-2d9e-41a1-b6fc-3d53c2f67501'
}
}
}

Followed by an empty access token

I've been stuck on for 9 months. Please help

Answer 1

Thanks for reaching out to us,

Refresh tokens given to Single-Page Applications are limited-time refresh tokens (usually 24 hours from the time of retrieval). This is a non-adjustable, non-sliding window, lifetime. Whenever a refresh token is used to renew an access token, a new refresh token is fetched with the renewed access token. This new refresh token will have a lifetime equal to the remaining lifetime of the original refresh token. Once a refresh token has expired, a new authorization code flow must be initiated to retrieve an authorization code and trade it for a new set of tokens.

Note: When a new refresh token is obtained, msal.js replaces the cached refresh token with the new refresh token, however the old refresh token is not invalidated by the server and may still be used to obtain access tokens until its expiration.

kindly use doc to refresh token - https://github.com/AzureAD/microsoft-authentication-library-for-js/blob/dev/lib/msal-browser/docs/token-lifetimes.md

----------

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".