本机 Android 中的 Azure AD B2C 令牌到期 MSAL

Question

我正在使用 MSAL 在我的原生 android 应用程序上集成 azure adb2c。我的令牌到期在门户中设置为 60 分钟。目前，每次应用启动时我都会调用acquireTokenSilentAsync，以确保access token is not expired。但是有什么方法可以避免每次调用acquireTokenSilentAsync 并且只在access token 过期时才进行调用？这是为了让应用加载更快，避免每次调用acquireTokenSilentAsync。

  @Override
    protected void onCreate(Bundle savedInstanceState) {
        super.onCreate(savedInstanceState);
        setContentView(R.layout.microsoft_azure);
        context = MicrosoftAzureActivity.this;
        initializeUI();
        // Creates a PublicClientApplication object with res/raw/auth_config_single_account.json
        PublicClientApplication.createSingleAccountPublicClientApplication(MicrosoftAzureActivity.this,
                R.raw.auth_config_single_account,
                new IPublicClientApplication.ISingleAccountApplicationCreatedListener() {
                    @Override
                    public void onCreated(ISingleAccountPublicClientApplication application) {
                        /**
                         * This test app assumes that the app is only going to support one account.
                         * This requires "account_mode" : "SINGLE" in the config json file.
                         **/
                        loadAccount();
                    }

                    @Override
                    public void onError(MsalException exception) {
                        displayError(exception);
                    }
            

});
}

Interactively fetching Token:

    mSingleAccountApp.signIn(MicrosoftAzureActivity.this, null, getScopes(), getAuthInteractiveCallback());

Load Account when already token is fetched Interactively and account is already Loaded:

 private void loadAccount() {
        if (mSingleAccountApp == null) {

            Log.d("SKT","Account Not Signed In");
            return;
        }
        Log.d("SKT","Account Not Signed In#1");

        mSingleAccountApp.getCurrentAccountAsync(new ISingleAccountPublicClientApplication.CurrentAccountCallback() {
            @Override
            public void onAccountLoaded(@Nullable IAccount activeAccount) {
                // You can use the account data to update your UI or your app database.
                mAccount = activeAccount;
                if (activeAccount != null) {
                    Log.d("SKT","Account Already Signed In");
              
         mSingleAccountApp.acquireTokenSilentAsync(getScopes(), B2CConfiguration.getAuthorityFromPolicyName("B2C_1_SignInSignUp"), getAuthSilentCallback());

                }
            }

            @Override
            public void onAccountChanged(@Nullable IAccount priorAccount, @Nullable IAccount currentAccount) {
                if (currentAccount == null) {
                    // Perform a cleanup task as the signed-in account changed.
                    showToastOnSignOut();
                }
            }

            @Override
            public void onError(@NonNull MsalException exception) {
                displayError(exception);
            }
        });
    }

Answer 1

不，您必须为此调用acquireTokenAsync，它会评估缓存中的令牌是否已过期或与请求的范围不同。如果两者都不是，则 MSAL 从缓存中返回令牌，它不会进行任何网络调用并且应该几乎是即时的。做任何不同的事情都不会获得任何性能优势，因为这是最低限度的。