search

AzureAD / microsoft-identity-web

Helps creating protected web apps and web APIs with Microsoft identity platform and Azure AD B2C
MIT License
679 stars 209 forks source link

[Feature Request] Token revocation support for MSI and FIC+MSI #3046

Open bgavrilMS opened 2 weeks ago

bgavrilMS commented 2 weeks ago

MSAL is starting to support CAE for MSI, in the 2 big scenarios:

The supporting APIs - WithClaims / WithClientCapabilities are already exposed to the ManagedIdentity app.

This request is to ensure Microsoft.Identity.Web correctly handles 401 responses - extracts claims and retries with Claims.

Similar work was done for confidential client https://github.com/AzureAD/microsoft-identity-web/pull/2616 by @pmaytak

bgavrilMS commented 2 weeks ago

CC @gladjohn