search

AzureAD / microsoft-authentication-library-for-java

Microsoft Authentication Library (MSAL) for Java http://aka.ms/aadv2
MIT License
280 stars 137 forks source link

[Supportability Bug] Deprecate ClientAssertion(string) as it leads to assertion expiration issues #819

Open Avery-Dunn opened 1 month ago

Avery-Dunn commented 1 month ago

MSAL client type

Confidential

Problem Statement

Creating a client assertion with just a String can easily lead to expiration issues.

Proposed solution

Deprecate the option to use a String, and instead recommend the callback option. This is also planned for other MSALs: https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/issues/4775 https://github.com/AzureAD/microsoft-authentication-library-for-js/issues/7118 https://github.com/AzureAD/microsoft-authentication-library-for-python/issues/705

Alternatives

No response