Fix broken 401 retry logic and wire forceRefresh through default auth provider

[jethibau-msft]

Problem

Two bugs prevent ADO web extensions from recovering when the host returns a near-expiry access token that gets rejected by ADO services.

Bug 1: 401 retry in issueRequest() never actually retries (Fetch.ts)

The retry logic uses do {} while(false) with continue. In JavaScript, continue inside do-while(false) jumps to the condition check (false), which exits the loop immediately. The intended retry never executes.

// Before - continue exits the loop, no retry ever happens
do {
    // ... auth + fetch ...
    if (response.status === 401 && !refreshToken && ...) {
        refreshToken = true;
        continue; // → jumps to while(false) → exits
    }
} while (false);

Bug 2: Default auth provider ignores forceRefresh (Client.ts)

The IAuthorizationTokenProvider interface defines getAuthorizationHeader(forceRefresh?: boolean), but the default provider created by getClient() declares the function with no parameters, so forceRefresh is silently ignored.

// Before - forceRefresh parameter is not accepted
getAuthorizationHeader: (): Promise<string> => {
    return getAccessToken().then(token => ...);
}

Fix

Fetch.ts

• Replace do {} while(false) with a proper while(true) loop that breaks after one retry
• Use headers.set() instead of headers.append() to avoid duplicate Authorization headers on retry

Client.ts

• Accept and forward forceRefresh in the default auth provider
• Cast getAccessToken to accept the optional parameter (forwards harmlessly until the SDK adds support via companion issue)

Impact

Every ADO web extension using getClient() REST clients is affected — no extension can recover from a 401 despite the code clearly intending to support retry. Long-running extension sessions hit intermittent failures when tokens approach expiry with no recovery path.

Companion PR

The azure-devops-extension-sdk also needs getAccessToken(forceRefresh?) to complete the chain: https://github.com/microsoft/azure-devops-extension-sdk (issue/PR to follow).

[jethibau-msft]

@microsoft-github-policy-service agree company="Microsoft"

[microsoft-github-policy-service]

@jethibau-msft the command you issued was incorrect. Please try again.

Examples are:

@microsoft-github-policy-service agree

and

@microsoft-github-policy-service agree company="your company"