How to handle expired access tokens in the Microsoft identity platform using least-privilege authentication?
Implementing a least-privilege security model requires that applications request only the specific scopes necessary for a task. In the Microsoft identity platform, access tokens have variable lifetimes, typically ranging from 60 to 90 minutes, after which they expire and the client must acquire new tokens. When using a public client, such as a single-page ap