AzureAD / microsoft-authentication-library-for-dotnet

Microsoft Authentication Library (MSAL) for .NET
https://aka.ms/msal-net
MIT License
1.36k stars 330 forks source link

[Supportability Bug] Deprecate WithClientAssertion(string) as it leads to assertion expiration issues #4775

Closed bgavrilMS closed 1 month ago

bgavrilMS commented 1 month ago

Library version used

4.60

.NET version

all

Scenario

ConfidentialClient - web site (AcquireTokenByAuthCode), ConfidentialClient - web api (AcquireTokenOnBehalfOf), ConfidentialClient - service to service (AcquireTokenForClient)

Is this a new or an existing app?

None

Issue description and reproduction steps

We keep getting feedback that WithClientAssert(string) causes expiration issues.

Relevant code snippets

No response

Expected behavior

No response

Identity provider

Microsoft Entra ID (Work and School accounts and Personal Microsoft accounts)

Regression

No response

Solution and workarounds

No response