Fix ESS credential staleness: proactively evict cert using token_not_after OID#6017

Closed

Robbie-Microsoft wants to merge 3 commits into

mainfrom

rginsburg/mtls_ess_cert_staleness_fix

Commits on May 19, 2026

Fix ESS credential staleness: reactive AADSTS1000901 retry + proactive token_not_after eviction

Robbie-Microsoft
and
Copilot
committed
Fix ESS credential staleness: read token_not_after OID directly from cert

Robbie-Microsoft
and
Copilot
committed
Improve test quality for OID-based cert staleness fix

Robbie-Microsoft
and
Copilot
committed