AuthenticationResult created with NativeBrokerPlugin has invalid expiresOn value

[TheBlueRage]

Core Library

MSAL Node (@azure/msal-node)

Core Library Version

2.7.0

Wrapper Library

MSAL Node Extensions (@azure/msal-node-extensions)

Wrapper Library Version

1.0.15

Public or Confidential Client?

Public

Description

Please note, this only occurs with the NativeBrokerPlugin.
The AuthenticationResult returned by the NativeBrokerPlugin has an invalid expiresOn value.

The code is creating a Date object from a timestamp based in seconds but Date objects are based on the milliseconds since January 1, 1970.

This causes evaluation of the expiresOn in relation to Date.now() to always appear as though the result has expired.

Simply multiplying the expiresOn by 1000 resolves the issue.

Error Message

None

MSAL Logs

None

Network Trace (Preferrably Fiddler)

• Sent
• Pending

MSAL Configuration

{
    auth: {
      clientId: <client id>,
      authority: <authority>
    },
    broker: {
      nativeBrokerPlugin: new NativeBrokerPlugin()
    }
}

Relevant Code Snippets

**For this code to work, you must be logged in to a domain**
const msalApp = new PublicClientApplication(
  {
    auth: {
      clientId: <client id>,
      authority: <authority>
    },
    broker: {
      nativeBrokerPlugin: new NativeBrokerPlugin()
    }
  }
 );
    
const accounts =
  await this.m_cApplication.getAllAccounts();

const  result =
   await msalApp.acquireTokenSilent(
     {
       account: accounts[0],
       scopes: <scopes>
     }
);

/* Basically if the expiration time they sent us is < now it's bogus */
if ( result.expiresOn.valueOf() < Date.now().valueOf() ) {
     /* This resolves the issue and adjusts the date object to the right time */
      result.expiresOn =
          new Date( result.expiresOn.valueOf() * 1000 );
      }
}

Reproduction Steps

Create a NativeBrokerPlugin
Get an AuthenticationResult
Check the AuthenticationResult.expiresOn property

Expected Behavior

Result should be a proper date object in the future not the past.

Identity Provider

Entra ID (formerly Azure AD) / MSA

Browsers Affected (Select all that apply)

Other

Regression

No response

Source

External (Customer)

[TheBlueRage]

Apologies:
This line of code:
const accounts = await this.m_cApplication.getAllAccounts();
Should be:
const accounts = await msalApp.getAllAccounts();