Token Caching and Refresh Quiz

What you'll be asked

1. What is the primary purpose of a refresh token in the OAuth 2.0 flow?
2. When implementing token caching in a client-side application, what is the most significant security risk to mitigate?
3. If your application receives an 'invalid_grant' error during a token refresh request, what is the most likely cause?
4. In the context of MSAL (Microsoft Authentication Library), what is the benefit of using an in-memory cache over a persistent (disk-based) cache?
5. A developer implements a silent token acquisition strategy using MSAL.js. Under what specific condition will this strategy fail and necessitate an interactive login prompt?

Answers and explanations come after you submit.