Refresh token doesn't work

[ViValentin]

Hello,

Great functions to simplify Graph API access.
Never the less it seems I have an issue using it to loop on all our AD (on prem) users and collecting their signin information.
After around one hour running I have error saying "message": "Access token has expired.",
He are the line of my code extracting the UserID from AD UPN and then requesting for beta signin informations

        $URI = "https://graph.microsoft.com/v1.0/users/" + $User.UserPrincipalName + "?`$select=id
        $ID = (Invoke-MSGraphQuery -URI $URI -token $token -tokenrefresh -credential $credential -tenantID $TenantId).id
        $URI = "https://graph.microsoft.com/beta/users/" + $ID + "?`$select=userPrincipalName, signInActivity"
        $SignInData = Invoke-MSGraphQuery -URI $URI -token $token -tokenrefresh -credential $credential -tenantID $TenantId | select -ExpandProperty Value

What I miss so that it doesn't refresh the token after one hour?
Thanks for help

[Freakling]

@ViValentin, how are you generating the first token, is the credential object a service principal or your normal user? Do you have MFA on your user?

[ViValentin]

Hello,
It is from a service principal. I think the issue is that you refresh the token from within your function using a local function variable.
In addition I found out this module https://github.com/darrenjrobinson/JWTDetails who allow to "decrypt" access token and so be able to determine when token will expire
Regards