Expiration date in the OAuth2 Module

[bjarkihall]

As seen on AJ Kauffmann's blogpost on S2S in AL, it's not possible to get the expiration date via the OAuth2 module.

Is there a recommended way of getting the expiration date, because the only way I'm seeing around it, is by invoking the http call explicitly instead of using the system module, which kind of defeats the purpose of the module in that case, right?

Is the expiration date to be added to OAuth2Impl? It didn't look like Dotnet ALAzureAdCodeGrantFlow had any helper function to retrieve the expiration date from the previous requests, so I guess it isn't stored/exposed anywhere?

[tinfister]

I use AcquireTokenAndTokenCacheByAuthorizationCode to get token cache, then Base64Convert.FromBase64(TokenCache) to get nice json from cache and there you can find AccessToken with expiration time.

[JesperSchulz]

Maybe it is worthwhile making the retrieval of the expiration time more convenient? If it doesn't create any security concerns, we'd be up for a PR :-)

[tinfister]

Will see what if time permits.

[bjarkihall]

@JesperSchulz I think the response is out of our control (and the AL team at Microsoft, see this warning) and we can't make a PR because this module is highly reliant on a DLL we don't have access to (and can't therefor make any contributions to).

We could make a PR that extracts the expiration date from the token (with Base64 Converter and Json types) but would it even be approved if it can easily break at some point?