Silent flow returns stale token

[ShmuelCammebys]

The silent flow is returning a token with an expiration which is after the time the token was requested (dead out of box), so the APi is returning 401.

Logs (sanitized):

[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Default app's access group: "Masked(not-null)".
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Using "Masked(not-null)" Team ID.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Init MSIDKeychainTokenCache with keychainGroup: Masked(not-null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Default cache) Get app metadata entries with clientId my-client-1-uuid, environment (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Get keychain items, key info (account: Masked(null) service: appmetadata-my-client-1-uuid generic: (null) type: 3001, keychainGroup: adal keychain group)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Trying to find keychain items...
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Keychain find status: 0
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Found 1 items.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Default accessor) Get accounts.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Default accessor) Get accounts with environment (null), clientId my-client-1-uuid, familyId , account (null), username (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Default cache) Get accounts with environment (null), unique user id Masked(null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Get keychain items, key info (account: Masked(null) service: (null) generic: (null) type: 1003, keychainGroup: adal keychain group)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Trying to find keychain items...
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Keychain find status: 0
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Found 2 items.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) retrieving cached credentials using credential query
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Get keychain items, key info (account: Masked(null) service: (null) generic: (null) type: 2002, keychainGroup: adal keychain group)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Trying to find keychain items...
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Keychain find status: 0
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Found 4 items.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) retrieved 4 cached credentials
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) credential query requires exact match with the cached credential items. Performing additional filtering checks.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-2-uuid, target: (null), realm: (null), environment: login.windows.net, familyID: (null), homeAccountId: <hash>, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDCredentialCacheItem) cached item superset mismatch; cached item had both invalid clientID and familyID. actual client ID: my-client-2-uuid, expected client ID: my-client-1-uuid, actual family ID: (null), expected family ID:
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) cached item had mismatching realm/clientId/familyId/target/requestedClaims with the credential query. excluding from the results.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-3-uuid, target: (null), realm: (null), environment: login.windows.net, familyID: (null), homeAccountId: <hash>, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDCredentialCacheItem) cached item superset mismatch; cached item had both invalid clientID and familyID. actual client ID: my-client-3-uuid, expected client ID: my-client-1-uuid, actual family ID: (null), expected family ID:
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) cached item had mismatching realm/clientId/familyId/target/requestedClaims with the credential query. excluding from the results.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-1-uuid, target: (null), realm: (null), environment: login.windows.net, familyID: (null), homeAccountId: 82bcbea8, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDCredentialCacheItem) cached item supserset match; actual client ID: my-client-1-uuid, expected client ID: my-client-1-uuid, actual family ID: (null), expected family ID:
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-1-uuid, target: (null), realm: (null), environment: login.windows.net, familyID: (null), homeAccountId: <hash>, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDCredentialCacheItem) cached item supserset match; actual client ID: my-client-1-uuid, expected client ID: my-client-1-uuid, actual family ID: (null), expected family ID:
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) returning 2 filtered credentials
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Default accessor) Looking for token with aliases (null), tenant (null), clientId my-client-1-uuid, scopes (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) retrieving cached credentials using credential query
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Get keychain items, key info (account: Masked(null) service: (null) generic: (null) type: 2003, keychainGroup: adal keychain group)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Trying to find keychain items...
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Keychain find status: 0
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Found 4 items.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) retrieved 4 cached credentials
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) credential query requires exact match with the cached credential items. Performing additional filtering checks.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-1-uuid, target: (null), realm: tenant-uuid, environment: login.windows.net, familyID: (null), homeAccountId: 82bcbea8, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-1-uuid, target: (null), realm: tenant-uuid, environment: login.windows.net, familyID: (null), homeAccountId: <hash>, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-2-uuid, target: (null), realm: tenant-uuid, environment: login.windows.net, familyID: (null), homeAccountId: <hash>, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDCredentialCacheItem) cached item clientID mismatch; actual client ID: my-client-2-uuid, expected client ID: my-client-1-uuid
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) cached item had mismatching realm/clientId/familyId/target/requestedClaims with the credential query. excluding from the results.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-3-uuid, target: (null), realm: tenant-uuid, environment: login.windows.net, familyID: (null), homeAccountId: <hash>, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDCredentialCacheItem) cached item clientID mismatch; actual client ID: my-client-3-uuid, expected client ID: my-client-1-uuid
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) cached item had mismatching realm/clientId/familyId/target/requestedClaims with the credential query. excluding from the results.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) returning 2 filtered credentials
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Default accessor) Found 2 tokens
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Default accessor) Found 2 tokens
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Get keychain items, key info (account: Masked(not-null) service: my-client-1-uuid generic: (null) type: 5001, keychainGroup: adal keychain group)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Trying to find keychain items...
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Keychain find status: 0
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Found 1 items.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Get keychain items, key info (account: Masked(not-null) service: my-client-1-uuid generic: (null) type: 5001, keychainGroup: adal keychain group)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Trying to find keychain items...
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Keychain find status: 0
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Found 1 items.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Default accessor) Found the following accounts in default accessor: MaskedArray(count=2)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Legacy accessor) Get accounts with environment (null), clientId my-client-1-uuid, familyId , account identifier (null), legacy identifier (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Get keychain items, key info (account: Masked(null) service: (null) generic: {length = 17, bytes = 0x4d534f70656e546563682e4144414c2e31} type: (null), keychainGroup: adal keychain group)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Trying to find keychain items...
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Keychain find status: -25300
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Found 0 items.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Legacy accessor) Found no refresh tokens
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Trying to get wipe info...
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Wipe query: Masked(not-null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Get wipe info status: -25300
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Default accessor) Found the following accounts in other accessors: MaskedArray(count=2)
⚪️ Got account Optional(<MSALAccount: 0x600002148f00>)
⚪️ Was able to get account; acquiring token silently.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Didn't find cached authority for https://login.microsoftonline.com/tenant-uuid. Falling back to home authority instead https://login.microsoftonline.com/tenant-uuid
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Intune Resource JSON is nil.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Intune Resource JSON is nil.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] -[MSALPublicClientApplication acquireTokenSilentForScopes:(
    "User.Read"
)
                                                  account:Masked(not-null)
                                                authority:(null)
                                        validateAuthority:Yes
                                             forceRefresh:No
                                             forceRefresh:No
                                            correlationId:(null)
                                             capabilities:(null)
                                            claimsRequest:(null)]
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Get keychain items, key info (account: Masked(not-null) service: my-client-1-uuid generic: (null) type: 5001, keychainGroup: adal keychain group)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Trying to find keychain items...
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Keychain find status: 0
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Found 1 items.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Start background app task with type 1 & taskId : 2
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Beginning silent flow.
⚪️ Doing auth for CASA
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Resolving authority: Masked(not-null), upn: auth.placeholder-89e799fd__my-company.com
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Init MSIDKeychainTokenCache with keychainGroup: Masked(not-null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Default cache) Get app metadata entries with clientId my-client-2-uuid, environment (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Get keychain items, key info (account: Masked(null) service: appmetadata-my-client-2-uuid generic: (null) type: 3001, keychainGroup: adal keychain group)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Trying to find keychain items...
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Keychain find status: 0
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Found 1 items.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Default accessor) Get accounts.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Default accessor) Get accounts with environment (null), clientId my-client-2-uuid, familyId , account (null), username (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Default cache) Get accounts with environment (null), unique user id Masked(null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Get keychain items, key info (account: Masked(null) service: (null) generic: (null) type: 1003, keychainGroup: adal keychain group)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Trying to find keychain items...
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] No cached preferred_network for authority
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Keychain find status: 0
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Found 2 items.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) retrieving cached credentials using credential query
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Get keychain items, key info (account: Masked(null) service: (null) generic: (null) type: 2002, keychainGroup: adal keychain group)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Trying to find keychain items...
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Keychain find status: 0
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Found 4 items.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) retrieved 4 cached credentials
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) credential query requires exact match with the cached credential items. Performing additional filtering checks.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-2-uuid, target: (null), realm: (null), environment: login.windows.net, familyID: (null), homeAccountId: <hash>, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDCredentialCacheItem) cached item supserset match; actual client ID: my-client-2-uuid, expected client ID: my-client-2-uuid, actual family ID: (null), expected family ID:
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-3-uuid, target: (null), realm: (null), environment: login.windows.net, familyID: (null), homeAccountId: <hash>, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDCredentialCacheItem) cached item superset mismatch; cached item had both invalid clientID and familyID. actual client ID: my-client-3-uuid, expected client ID: my-client-2-uuid, actual family ID: (null), expected family ID:
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) cached item had mismatching realm/clientId/familyId/target/requestedClaims with the credential query. excluding from the results.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-1-uuid, target: (null), realm: (null), environment: login.windows.net, familyID: (null), homeAccountId: 82bcbea8, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDCredentialCacheItem) cached item superset mismatch; cached item had both invalid clientID and familyID. actual client ID: my-client-1-uuid, expected client ID: my-client-2-uuid, actual family ID: (null), expected family ID:
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) cached item had mismatching realm/clientId/familyId/target/requestedClaims with the credential query. excluding from the results.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-1-uuid, target: (null), realm: (null), environment: login.windows.net, familyID: (null), homeAccountId: <hash>, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDCredentialCacheItem) cached item superset mismatch; cached item had both invalid clientID and familyID. actual client ID: my-client-1-uuid, expected client ID: my-client-2-uuid, actual family ID: (null), expected family ID:
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) cached item had mismatching realm/clientId/familyId/target/requestedClaims with the credential query. excluding from the results.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) returning 1 filtered credentials
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Default accessor) Looking for token with aliases (null), tenant (null), clientId my-client-2-uuid, scopes (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) retrieving cached credentials using credential query
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Get keychain items, key info (account: Masked(null) service: (null) generic: (null) type: 2003, keychainGroup: adal keychain group)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Trying to find keychain items...
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Keychain find status: 0
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Found 4 items.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) retrieved 4 cached credentials
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) credential query requires exact match with the cached credential items. Performing additional filtering checks.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-1-uuid, target: (null), realm: tenant-uuid, environment: login.windows.net, familyID: (null), homeAccountId: 82bcbea8, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDCredentialCacheItem) cached item clientID mismatch; actual client ID: my-client-1-uuid, expected client ID: my-client-2-uuid
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) cached item had mismatching realm/clientId/familyId/target/requestedClaims with the credential query. excluding from the results.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-1-uuid, target: (null), realm: tenant-uuid, environment: login.windows.net, familyID: (null), homeAccountId: <hash>, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDCredentialCacheItem) cached item clientID mismatch; actual client ID: my-client-1-uuid, expected client ID: my-client-2-uuid
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) cached item had mismatching realm/clientId/familyId/target/requestedClaims with the credential query. excluding from the results.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-2-uuid, target: (null), realm: tenant-uuid, environment: login.windows.net, familyID: (null), homeAccountId: <hash>, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-3-uuid, target: (null), realm: tenant-uuid, environment: login.windows.net, familyID: (null), homeAccountId: <hash>, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDCredentialCacheItem) cached item clientID mismatch; actual client ID: my-client-3-uuid, expected client ID: my-client-2-uuid
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) cached item had mismatching realm/clientId/familyId/target/requestedClaims with the credential query. excluding from the results.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDAccountCredentialCache) returning 1 filtered credentials
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Default accessor) Found 1 tokens
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Get keychain items, key info (account: Masked(not-null) service: my-client-2-uuid generic: (null) type: 5001, keychainGroup: adal keychain group)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Trying to find keychain items...
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Keychain find status: 0
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Found 1 items.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Get keychain items, key info (account: Masked(not-null) service: my-client-2-uuid generic: (null) type: 5001, keychainGroup: adal keychain group)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Trying to find keychain items...
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Keychain find status: 0
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Found 1 items.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Default accessor) Found the following accounts in default accessor: MaskedArray(count=1)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Legacy accessor) Get accounts with environment (null), clientId my-client-2-uuid, familyId , account identifier (null), legacy identifier (null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Get keychain items, key info (account: Masked(null) service: (null) generic: {length = 17, bytes = 0x4d534f70656e546563682e4144414c2e31} type: (null), keychainGroup: adal keychain group)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Trying to find keychain items...
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Keychain find status: -25300
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Found 0 items.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Legacy accessor) Found no refresh tokens
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Trying to get wipe info...
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Wipe query: Masked(not-null)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Get wipe info status: -25300
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (Default accessor) Found the following accounts in other accessors: MaskedArray(count=1)
⚪️ Got account Optional(<MSALAccount: 0x600002170b40>)
⚪️ Was able to get account; acquiring token silently.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Didn't find cached authority for https://login.microsoftonline.com/tenant-uuid. Falling back to home authority instead https://login.microsoftonline.com/tenant-uuid
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Intune Resource JSON is nil.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Intune Resource JSON is nil.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 0153C741-BEA5-4C72-8C4B-9870EDCC6835] [MSAL] -[MSALPublicClientApplication acquireTokenSilentForScopes:(
    "User.Read"
)
                                                  account:Masked(not-null)
                                                authority:(null)
                                        validateAuthority:Yes
                                             forceRefresh:No
                                            correlationId:(null)
                                             capabilities:(null)
                                            claimsRequest:(null)]
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 0153C741-BEA5-4C72-8C4B-9870EDCC6835] [MSAL] Get keychain items, key info (account: Masked(not-null) service: my-client-2-uuid generic: (null) type: 5001, keychainGroup: adal keychain group)
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 0153C741-BEA5-4C72-8C4B-9870EDCC6835] [MSAL] Trying to find keychain items...
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 0153C741-BEA5-4C72-8C4B-9870EDCC6835] [MSAL] Keychain find status: 0
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 0153C741-BEA5-4C72-8C4B-9870EDCC6835] [MSAL] Found 1 items.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 0153C741-BEA5-4C72-8C4B-9870EDCC6835] [MSAL] Beginning silent flow.
[MSAL] TID=38452234 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 0153C741-BEA5-4C72-8C4B-9870EDCC6835] [MSAL] Resolving authority: Masked(not-null), upn: auth.placeholder-89e799fd__my-company.com
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Caching AAD Environements
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] networkHost: login.microsoftonline.com, cacheHost: login.windows.net, aliases: login.microsoftonline.com, login.windows.net, login.microsoft.com, sts.windows.net
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] networkHost: login.partner.microsoftonline.cn, cacheHost: login.partner.microsoftonline.cn, aliases: login.partner.microsoftonline.cn, login.chinacloudapi.cn
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] networkHost: login.microsoftonline.de, cacheHost: login.microsoftonline.de, aliases: login.microsoftonline.de
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] networkHost: login.microsoftonline.us, cacheHost: login.microsoftonline.us, aliases: login.microsoftonline.us, login.usgovcloudapi.net
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] networkHost: login-us.microsoftonline.com, cacheHost: login-us.microsoftonline.com, aliases: login-us.microsoftonline.com
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Resolved authority, validated: YES, error: 0
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Looking for access token...
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (Default accessor) Looking for token with aliases (
    "login.windows.net",
    "login.microsoftonline.com",
    "login.windows.net",
    "login.microsoft.com",
    "sts.windows.net"
), tenant tenant-uuid, clientId my-client-1-uuid, scopes User.Read
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (Default accessor) Looking for token with aliases (
    "login.windows.net",
    "login.microsoftonline.com",
    "login.windows.net",
    "login.microsoft.com",
    "sts.windows.net"
), tenant tenant-uuid, clientId my-client-1-uuid, scopes User.Read
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) retrieving cached credentials using credential query
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Get keychain items, key info (account: Masked(null) service: (null) generic: {length = 85, bytes = 0x61636365 7373746f 6b656e2d 31646262 ... 39613864 62306362 } type: 2001, keychainGroup: adal keychain group)
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Trying to find keychain items...
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Keychain find status: 0
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Found 2 items.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) retrieved 2 cached credentials
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) credential query requires exact match with the cached credential items. Performing additional filtering checks.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-1-uuid, target: openid profile User.Read email, realm: tenant-uuid, environment: login.windows.net, familyID: (null), homeAccountId: 82bcbea8, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDCredentialCacheItem) cached item did not have a valid home account Id. Actual: 82bcbea8, expected: <hash>
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) cached item had mismatching homeAccountID or environment/aliases with the credential query. excluding from the results.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-1-uuid, target: openid profile User.Read email, realm: tenant-uuid, environment: login.windows.net, familyID: (null), homeAccountId: <hash>, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Check if credential environment login.windows.net is included in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.windows.net
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] credential environment found in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.microsoftonline.com
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.windows.net
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] credential environment found in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.microsoft.com
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: sts.windows.net
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] credential environment not found in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) returning 1 filtered credentials
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (Default accessor) Found 1 tokens
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (Default accessor) Found 1 tokens
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Found access token for account <hash>:auth.placeholder-89e799fd__my-company.com which expires in 330.295672
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Intune Resource JSON is nil.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Found valid access token.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Looking for family refresh token...
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (Default cache) Get app metadata entries with clientId my-client-1-uuid, environment (null)
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Get keychain items, key info (account: Masked(null) service: appmetadata-my-client-1-uuid generic: (null) type: 3001, keychainGroup: adal keychain group)
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Trying to find keychain items...
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Keychain find status: 0
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Found 1 items.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Check if credential environment login.windows.net is included in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.windows.net
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] credential environment found in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.microsoftonline.com
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.windows.net
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] credential environment found in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.microsoft.com
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: sts.windows.net
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] credential environment not found in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Didn't find family refresh token
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Looking for app refresh token...
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (Default accessor) Finding token with user ID <hash>, clientId my-client-1-uuid, familyID (null), authority https://login.microsoftonline.com/tenant-uuid
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (Default accessor) Looking for token with aliases (
    "login.windows.net",
    "login.microsoftonline.com",
    "login.windows.net",
    "login.microsoft.com",
    "sts.windows.net"
), tenant (null), clientId my-client-1-uuid, scopes (null)
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (Default accessor) Looking for token with aliases (
    "login.windows.net",
    "login.microsoftonline.com",
    "login.windows.net",
    "login.microsoft.com",
    "sts.windows.net"
), tenant (null), clientId my-client-1-uuid, scopes (null)
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) retrieving cached credentials using credential query
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Get keychain items, key info (account: Masked(null) service: refreshtoken-my-client-1-uuid-- generic: {length = 50, bytes = 0x72656672 65736874 6f6b656e 2d316462 ... 38313032 6231642d } type: 2002, keychainGroup: adal keychain group)
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Trying to find keychain items...
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Keychain find status: 0
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Found 2 items.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) retrieved 2 cached credentials
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) credential query requires exact match with the cached credential items. Performing additional filtering checks.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-1-uuid, target: (null), realm: (null), environment: login.windows.net, familyID: (null), homeAccountId: 82bcbea8, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDCredentialCacheItem) cached item did not have a valid home account Id. Actual: 82bcbea8, expected: <hash>
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) cached item had mismatching homeAccountID or environment/aliases with the credential query. excluding from the results.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-1-uuid, target: (null), realm: (null), environment: login.windows.net, familyID: (null), homeAccountId: <hash>, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Check if credential environment login.windows.net is included in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.windows.net
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] credential environment found in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.microsoftonline.com
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.windows.net
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] credential environment found in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.microsoft.com
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: sts.windows.net
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] credential environment not found in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) returning 1 filtered credentials
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (Default accessor) Found 1 tokens
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (Default accessor) Found 1 tokens
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (Default accessor) Found refresh token by home account id
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Found app refresh token.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (Default accessor) Looking for token with aliases (
    "login.windows.net",
    "login.microsoftonline.com",
    "login.windows.net",
    "login.microsoft.com",
    "sts.windows.net"
), tenant tenant-uuid, clientId my-client-1-uuid, scopes (null)
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (Default accessor) Looking for token with aliases (
    "login.windows.net",
    "login.microsoftonline.com",
    "login.windows.net",
    "login.microsoft.com",
    "sts.windows.net"
), tenant tenant-uuid, clientId my-client-1-uuid, scopes (null)
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) retrieving cached credentials using credential query
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Get keychain items, key info (account: Masked(null) service: idtoken-my-client-1-uuid-tenant-uuid- generic: {length = 81, bytes = 0x6964746f 6b656e2d 31646262 37643236 ... 39613864 62306362 } type: 2003, keychainGroup: adal keychain group)
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Trying to find keychain items...
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Keychain find status: 0
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Found 2 items.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) retrieved 2 cached credentials
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) credential query requires exact match with the cached credential items. Performing additional filtering checks.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-1-uuid, target: (null), realm: tenant-uuid, environment: login.windows.net, familyID: (null), homeAccountId: 82bcbea8, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] (MSIDCredentialCacheItem) cached item did not have a valid home account Id. Actual: 82bcbea8, expected: <hash>
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) cached item had mismatching homeAccountID or environment/aliases with the credential query. excluding from the results.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) performing filtering check on cached credential item with the following properties - client ID: my-client-1-uuid, target: (null), realm: tenant-uuid, environment: login.windows.net, familyID: (null), homeAccountId: <hash>, enrollmentId: Masked(null), appKey: Masked(null), applicationIdentifier: Masked(null), tokenType: (null)
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Check if credential environment login.windows.net is included in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.windows.net
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] credential environment found in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.microsoftonline.com
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.windows.net
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] credential environment found in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.microsoft.com
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: sts.windows.net
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] credential environment not found in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (MSIDAccountCredentialCache) returning 1 filtered credentials
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (Default accessor) Found 1 tokens
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (Default accessor) Found 1 tokens
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Found id token Masked(not-null) for account <hash>:Masked(not-null).
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (Default accessor) Looking for account with authority https://login.microsoftonline.com/tenant-uuid, legacy user ID auth.placeholder-89e799fd__my-company.com, home account ID <hash>
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] (Default cache) Get accounts with environment (null), unique user id <hash>
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Get keychain items, key info (account: Masked(null) service: tenant-uuid generic: (null) type: 1003, keychainGroup: adal keychain group)
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Trying to find keychain items...
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Keychain find status: 0
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Found 2 items.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Check if credential environment login.windows.net is included in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.windows.net
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] credential environment found in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.microsoftonline.com
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.windows.net
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] credential environment found in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: login.microsoft.com
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] environment alias found: sts.windows.net
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] credential environment not found in the list of valid environment aliases.
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Silent flow finished. Result (not-null), error: 0 error domain: (null)
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32] Parsing result access token
[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] acquireTokenSilent returning with at: <hash> scopes:(
    openid,
    profile,
    "User.Read",
    email
) expiration:2024-11-26 13:05:03 +0000

[mipetriu]

Hello @ShmuelCammebys, do you mind providing more context on your scenario? The log you shared here reports that the silent token request found a cached access token which was still valid:

[MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] Found access token for account :auth.placeholder-89e799fd__my-company.com which expires in 330.295672

And this seems to match the reported time of expiration here:

MSAL] TID=38452399 MSAL 1.3.3 iOS Sim 18.1 [2024-11-26 12:59:32 - 64CCBB58-531C-45E7-B32C-189ED752C754] [MSAL] acquireTokenSilent returning with at: scopes:(
openid,
profile,
"User.Read",
email
) expiration:2024-11-26 13:05:03 +0000

[ShmuelCammebys]

@mipetriu But when I decode the token, the expiration was 20 minutes before the request.

Log:

[MSAL] TID=41246488 MSAL 1.3.3 iOS Sim 18.1 [2024-11-28 07:01:20 - DC9EF5F5-F916-4BB8-8505-968EB98D2E3B] [MSAL] acquireTokenSilent returning with at: ff53b52 scopes:(
    openid,
    profile,
    "User.Read",
    email
) expiration:2024-11-28 07:10:26 +0000

Token:

iat	Thu Nov 28 2024 00:35:38 GMT-0500 (Eastern Standard Time)	"Issued At" indicates when the authentication for this token occurred.
nbf	Thu Nov 28 2024 00:35:38 GMT-0500 (Eastern Standard Time)	The "nbf" (not before) claim identifies the time before which the JWT MUST NOT be accepted for processing.
exp	Thu Nov 28 2024 01:40:38 GMT-0500 (Eastern Standard Time)	The "exp" (expiration time) claim identifies the expiration time on or after which the JWT MUST NOT be accepted for processing. It's important to note that a resource may reject the token before this time as well - if for example a change in authentication is required or a token revocation has been detected.

Error from Azure:

{"code":401,"message":"IDX10223: Lifetime validation failed. The token is expired. ValidTo (UTC): '11\/28\/2024 06:40:38', Current time (UTC): '11\/28\/2024 07:01:27'."}

[mipetriu]

@ShmuelCammebys - I see, the correlationID DC9EF5F5-F916-4BB8-8505-968EB98D2E3B that you shared above was not in the initial set of logs. Do you happen to have a full set of logs which contains this correlationID as well?

[ShmuelCammebys]

@mipetriu I do not. However the same issue occurred in the previous logs, so can't you use that correlation ID and those logs? Your original challenge to the 1st set of logs was that the logs claimed the expiration was later, but I showed using a 2nd set of logs that the claim is false, so your challenge was not a valid challenge, and the 1st logs should suffice.

[mipetriu]

@ShmuelCammebys - apologies for the delay. In the more recent information you shared, I see that (1.) MSAL made a silent token request and returned a token which has a valid expiration time. I then see that (2.) your app makes a call a few seconds later and receives a response that the provided access token is expired.

I asked about a full log for this test so that I could read back and check the request that initially retrieved this access token from the server. That way I could double-check this token acquisition with our service-side logs.

From the information provided so far, is it possible that the app has different users/tenants/etc? Maybe a token returned with different search parameters was used between the shown silent token request and API request. I see some keychain items are being filtered out in the initial logs for that particular request because they have a different homeAccountId/authority/etc.

[ShmuelCammebys]

@mipetriu There may be two accounts (two different emails). There are also two different client ids for the same authority.

[mipetriu]

@ShmuelCammebys - Does this issue reproduce consistently? Is it possible to provide a complete log of the issue?

Unfortunately, there is not enough information related to this issue for me to reach any conclusions. I can't trace the acquisition of the token that was expired, as the silent request logs provided seem to have result in a different token (likely due to a different user).

[ShmuelCammebys]

@mipetriu still an issue, but only happens every 30 days or something. I had to introduce a workaround that whenever the user gets a 401, it forces an interactive authentication. I will try to get logs.

[ShmuelCammebys]

@mipetriu we just downgraded from swiftui to uikit, because it is more reliable with the msal SDK. We will see if it has the same issue, but in testing it didn't.

[ShmuelCammebys]

@mipetriu Here is an example of the problem. It authenticates with two separate resources. One, the user is not authorized, the other they are. For the one that they are, the token returned expires at 1737416909, but that is before the call was made. Times in the logs are UTC.

msal_bug_logs.txt

[ShmuelCammebys]

@mipetriu Seems like it might be these issues:

• Expired tokens returned from Authenticator #1555
• ID token is only refreshed when Access token is expired microsoft-authentication-library-for-dotnet#3119