Enable proactive renewal of Managed Identity tokens

Azure / azure-sdk-for-go

This repository is for active development of the Azure SDK for Go. For consumers of the SDK we recommend visiting our public developer docs at:

https://docs.microsoft.com/azure/developer/go/

MIT License

1.59k stars 821 forks source link

Enable proactive renewal of Managed Identity tokens #19213

Open scottaddie opened 1 year ago

scottaddie commented 1 year ago

Intro: Refreshing the tokens with half lifetime would improve resiliency for clients if there's an ESTS outage while fetching a token.

Acceptance Criteria: All MSI tokens are refreshed at least half lifetime token request is made after half lifetime

MSI has token lifetime of 24 hours. Refresh the tokens if refresh_in is passed from ESTS or at half lifetime if refresh_in isn't passed. For tokens which have lifetime of less than 2 hours, there are no changes to be made.

chlowell commented 1 year ago

Blocked on https://github.com/AzureAD/microsoft-authentication-library-for-go/issues/239