az login need to re-login multiple times a day

[velvia]

This is autogenerated. Please review and update as needed.

Describe the bug

Command Name
az login

I have heard from many that az login is supposed to keep you logged in for many days or weeks. However, myself and another colleague, we have to login at the start of each day we are doing things using az CLI or scripts that use it, and sometimes multiple times a day. Do you know why that is?

To Reproduce:

Steps to reproduce the behavior. Note that argument values have been redacted, as they may contain sensitive information.

• Put any pre-requisite steps here...
• az login

Repeat other az commands and see that az login is required at beginning of every day, at minimum.

Expected Behavior

az login has keep alive token and keeps you logged in for a long time, at least a week

Environment Summary

macOS-10.15.7-x86_64-i386-64bit
Python 3.8.6
Installer: HOMEBREW

azure-cli 2.14.0 *

Additional Context

[yonzhan]

az login

[velvia]

@yonzhan sorry? Yes I know how to use az login the problem is that I get logged out too often. Any hints?

[jiasli]

Hi @velvia, apologize for the confusion. @yonzhan is only triaging this issue indicating we have received your request.

Could you share the error you got if you don't re-login? Is it something similar to #16209?

Thanks for the information.

[matthai]

I have the same problem.

It's different from #16209 in that it occurs during az login, not during az aks get-credentials.

It's similar in the sense that it seems to happen due to a token timeout. I get the following error message:
AADSTS70043: The refresh token has expired or is invalid due to sign-in frequency checks by conditional access. The token was issued on 2021-01-22T00:44:26.3870000Z and the maximum allowed lifetime for this request is 43200.
Trace ID: 6a8b15e9-6f31-4152-9ba9-734539395000
Correlation ID: 64ac554e-63ae-49a0-b580-a23c77b35ac6
Timestamp: 2021-01-26 07:47:14Z

I've been using az login for a while now, and this problem started in the last two weeks or so.

[jiasli]

@matthai, did the error occur in the browser or in the terminal? Could you share a screenshot? Thanks.

[velvia]

@jiasli there is no error from az login for me. It is when using other az commands, such as aks, etc that the error occurs, and then I would need to login again. (or for example using kubectl, which interacts with AKS)
The problem for me is not az login error, it is that I am asked to login too frequently.

E0125 20:14:59.503595   36876 azure.go:154] Failed to acquire a token: failed acquiring new token: waiting for device code authentication to complete: autorest/adal/devicetoken: Error occurred while sending request with device code for a token: Post "https://login.microsoftonline.com/8ec745c3-f5c9-433a-9ca4-8702b7059c2c/oauth2/token": net/http: TLS handshake timeout