1
votes

im using Msal.js (acquireTokenSilent) to acquire the refresh token to keep the user logged in after the access token has expired. but the limit to this is that I can refresh the token only till the session cookie is valid. the trouble is that even though the refresh token is valid for 14 days but the session cookie expires after 24 hours and after that I cannot use acquireTokenSilent . How to refresh the token after 24 hours of inactivity ?

1

1 Answers

2
votes

You aren’t using a refresh token here, this is a JavaScript app using cookie based SSO. You can use keep me signed in to extend the users Azure AD B2C session lifetime.

https://docs.microsoft.com/en-us/azure/active-directory-b2c/custom-policy-keep-me-signed-in