Azure/azure-sdk-for-python

Entra access token authentication policies such as `BearerTokenAuthenticationPolicy` should respect `refresh_on` information

christothes opened this issue · 3 comments

christothes commented

Long lived credentials such as those received from managed identity authentication include additional metadata concerning when a token can/should be refreshed. Our authentication policies should take this information into account when refreshing access tokens.

This involves:

  • Modifying relevant authentication policies
  • Modifying the AccessToken type to include this optional information
  • Modifying Azure.Identity credential implementations to populate the refresh_on information in the AccessToken