Support Access Token Refresh for MSAL Provided Tokens (with_interactive, with_device_flow, with_client_certificate)

[kamilkrukowski]

PR Description

This PR addresses re-addresses issue #950, which still occurs in the latest 2.6.1 release.

It extends the token refresh behavior to support MSAL-based authentication workflows — specifically with_client_certificate, with_interactive, and with_device_flow — by incorporating token expiration and refresh logic whenever using a cached access token.

---

Comment

In reviewing the current implementation:

• TokenResponse does not have an explicitly annotated expiresIn property.
• However, the constructor methods in AuthenticationContext — including with_interactive, with_device_flow, and with_client_certificate — all rely on MSAL, which consistently returns an expires_in field in its token response.
• The TokenResponse class dynamically sets this field when available.

To ensure compatibility while maintaining backward safety, this PR takes a conservative approach: it checks for the presence of the expiresIn attribute on TokenResponse before using it, and gracefully defaults to the original behavior if it's absent.