MS Graph - 客户端凭证流

Question

Anyone knows using (confidential client credential flow)[https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow] to get the access token for an application (I am using a Java Client App using MSAL4J) if there is a way to modify the accessToken lifetime (default to 1 hour) I tried to check the https://portal.azure.com but I did not find a clear way to do that. I check this doc - https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-configurable-token-lifetimes Thanks

Answer 1

I don't want to be rude, but what is the reason you want a longer token lifetime?

With client credentials flow, you got credentials, you exchange them for a token. That is valid for 1 hour (actually 65 minutes I believe, but that just a minor detail).

If the lifetime expired you request a new token with the same credentials.

It's a security measure. If you leak the token the attacker has access to the resource for the rest of the lifetime of the token. That is why they keeping it long enough for an application to function, but short enough to keep the risk small.