v3.4.0

Compare Source

========

• Updated to Microsoft.IdentityModel.* 8.2.1
• Updated to Microsoft.Identity.Abstractions 7.2.0

New features

• Add ROPC flow support for confidential client applications. See 3091, 3129, 3139.
• Allow multi-tenant applications to specify the AppHomeTenantId to be used for client credentials. See 3121, 3132.
• Update to use .NET 9 GA. See 3127.

v3.3.1

Compare Source

========

• Updated to Microsoft.IdentityModel.* 8.2.0

Supportability

• Added JSON schema support for Microsoft.Identity.Web configuration. This allows for schema validation in the appsettings.json, improving configuration accuracy and developer experience. To use it, add the following at the top of your appsettings.json:
  "$schema": "https://github.com/AzureAD/microsoft-identity-web/blob/master/JsonSchemas/microsoft-identity-web.json"
  This update enhances the configuration process by providing clear structure and validation for settings used in Microsoft.Identity.Web. See PR #​3119 for details.

Fundamentals

• Fix a flaky test in the L1L2Cache tests. See PR #​3122 for details.

v3.3.0

Compare Source

========

• Updated to Microsoft.Identity.Client 4.66.0
• Update system.Text.Json to 8.0.5 CVE-2024-43485
• Updated to .NET 9 RC2

New features

• Microsoft.Identity.Web token acquisitio now provides an extensibility mechanism to enlight non-standard features. For details, see #​2975

Fundamentals

• Split DownstreamApi methods between AoT compatible and incompatible methods by @​SaurabhMSFT in https://github.com/AzureAD/microsoft-identity-web/pull/3090
• ASP.NET Core (and other) cross-link updates by @​guardrex in https://github.com/AzureAD/microsoft-identity-web/pull/3096. Thank you!
• Onboarded to Threading Analyzers. For details, see #​3052
• display code coverage as PR comments
• Fix flaky EncryptionTestAsync on .NET 9.

v3.2.2

Compare Source

=========

• Updated to Microsoft.IdentityModel.* 8.1.2

• Breaking change (without major version change. Sorry!)
  ClientAssertionProviderBase.GetSignedAssertion now takes an MSAL.NET AssertionRequestOptions and the method name has changed from GetSignedAssertion to GetClientAssertionAsync:

  var m = new ManagedIdentityClientAssertion("<some client id>");
  m.GetSignedAssertion(CancellationToken.None); // this method will break on v3.2.2  

v3.2.1

Compare Source

=========

• Updated to Microsoft.IdentityModel.* 8.1.1

v3.2.0

Compare Source

=========

• Updated to Microsoft.Identity.Abstractions 7.1.0
• Updated to Microsoft.IdentityModel.* 8.1.0
• Updated to Microsoft.Identity.Client 4.64.1
   

New features

• In .NET 8 and above, IDownstreamApi overloads take a JsonTypeInfo<T> parameter to enable source generated JSON deserialization. See issue #​2930 for details.

Bug fixes:

• Azure region is used while creating application keys when the TokenAcquisition service caches application objects, and the TokenAcquirerFactory caches TokenAcquirer. See #​3002 for details.
• Improved error messages for FIC. See issue #​3000 for details.

Fundamentals:

• Improved test coverage for GetCacheKey. See PR #​3020 for details.
• Update to .NET 9-RC1. See issue #​3025 for details.
• Fix static analysis warnings. See PR #​3024 for details.