Fix for ADO 2696517 - Githubissues

AzureAD / microsoft-authentication-library-common-for-android

Common code used by both the Active Directory Authentication Library (ADAL) and the Microsoft Authentication Library (MSAL)

MIT License

41 stars 35 forks source link

Closed shahzaibj closed 12 months ago

shahzaibj commented 1 year ago

This makes the following change:

Always validate calling app's redirect URI (as opposed to only doing it for MSAL and OneAuth).
If we don't validate redirect URI then that will break MAM as it will allows callers to impersonate app identity