AzureAD / microsoft-authentication-library-for-java

Microsoft Authentication Library (MSAL) for Java http://aka.ms/aadv2
MIT License
280 stars 137 forks source link

Bind to Only Loopback Address(es) When Making Interactive Request #797

Closed crimsonvspurple closed 3 months ago

crimsonvspurple commented 3 months ago

Currently, we are creating Socket using InetSocketAddress(port) which is using wildcard address, so it will attempt to bind to all available network interfaces that includes private IP like 192.168.x.x, 10.x.x.x, etc; which in turns, may/will trigger the firewall prompt.

In this commit, we explicitly bind to loopback addresses only which will not trigger firewall.