Fuck Oauth, I can’t believe I spent half a workweek on this shit. Useless garbage, script kiddies win this round. 
Discussion
you try reissuing the access token? aka turning it off and on again lol
such a crap ux for such a pervasive company
Microsoft has their head so far up their ass they’re gonna choke & die on this shit.
Msal token needed cred auth, took me a loooooong while to figure that out. Why all this added complexity for the SAME ATTACK SURFACE?!