Use SHA256 thumbprints in non-ADFS cert flows

AzureAD / microsoft-authentication-library-for-java

Microsoft Authentication Library (MSAL) for Java http://aka.ms/aadv2

MIT License

289 stars 145 forks source link

Closed Avery-Dunn closed 4 months ago

Avery-Dunn commented 4 months ago

Updates the internal thumbprint method for certificate flows from SHA-1 to SHA-256, as per https://github.com/AzureAD/microsoft-authentication-library-for-java/issues/760

ADFS scenarios must still use SHA-1 until SHA-256 is supported server-side.