All pull requests

Pull requests

• Use typed managed identity mTLS acquisition and default-on attestation options

  #4122·Gladwin Johnson VR (gladjohn) opened Oct 28, 2026Contributor·

  ·
  2

• Bump @azure/msal-node from 5.2.2 to 7.1.0 in /tests/DevApps/SidecarAdapter/typescript

  dependenciesjavascript
  #4119·dependabot[bot] opened Oct 28, 2026Bot·

  ·

• Soft-deprecate named configuration overload for message handlers

  #4115·bgavrilMS with CopilotAI opened Oct 26, 2026·4 tasks done·

  ·
  1

  3

  

• Clarify custom scope and ID-token claim support

  #4114·bgavrilMS with CopilotAI opened Oct 26, 2026·

  ·
  1

  

• POC: validate snapshot-based memory and distributed token caches

  agentic-clitest
  #4112·Bogdan Gavril (bgavrilMS) opened Oct 26, 2026Member·3 of 4 tasks·

  ·

• Bump @vitest/mocker and vitest in /tests/DevApps/SidecarAdapter/typescript

  dependenciesjavascript
  #4111·dependabot[bot] opened Oct 25, 2026Bot·

  ·

• Forward client-originated claims to MSAL

  #4109·Robbie-Microsoft opened Oct 23, 2026Contributor·3 of 4 tasks·

  ·
  3

• Update MSAL.NET to 4.91.1

  agentic-clichore
  #4105·Neha Bhargava (neha-bhargava) opened Oct 19, 2026Contributor·

  ·

• Bump brace-expansion from 1.1.18 to 1.1.21 in /tests/DevApps/SidecarAdapter/typescript

  dependenciesjavascript
  #4089·dependabot[bot] opened Oct 13, 2026Bot·

  ·

• Bump MSAL and KeyAttestation to 4.91.0

  #4086·Gladwin Johnson VR (gladjohn) opened Oct 12, 2026Contributor·

  ·
  1

• Recover MSI v2 downstream calls from stale certificates

  #4085·Gladwin Johnson VR (gladjohn) opened Oct 12, 2026Contributor·

  ·
  5

• Fix managed identity credential recovery after initial assertion failure

  #4081·Bernd Verst (berndverst) opened Oct 2, 2026·4 tasks done·

  ·
  1

• Add .NET 11 targeting to Microsoft Identity Web

  #4068·Daniel Roth (danroth27) opened Sep 24, 2026Collaborator·

  ·
  20

• Support .NET 11 automatic CSRF protection on logout

  #4066·Daniel Roth (danroth27) opened Sep 24, 2026Collaborator·

  ·
  15

• Isolate configured token cache providers

  #4014·Ignacio Inglese (iNinja) opened Aug 31, 2026Contributor·

  ·
  4

• DevEx - Add documentation for bearer-over-mTLS user flows

  #3997·Gladwin Johnson VR (gladjohn) opened Aug 6, 2026Contributor·

  ·
  17

• Fix #3895: BlazorAuthenticationChallengeHandler sends a local returnUrl instead of the absolute NavigationManager.Uri

  #3995·Devon (DevonEast) opened Aug 5, 2026·

  ·
  1

  3

• Bump postcss from 8.5.15 to 8.5.26 in /tests/DevApps/SidecarAdapter/typescript

  dependenciesjavascript
  #3993·dependabot[bot] opened Aug 2, 2026Bot·

  ·
  2

• [do not merge] deliberate break to test cg feature on all SDKs

  #3987·Gladwin Johnson VR (gladjohn) opened Jul 29, 2026Contributor·

  ·

• Redeem authorization code with MSAL when complex client credentials are configured (#3631)

  #3925·Armin Azar (armin-azar) opened Jul 4, 2026Contributor·4 tasks done·

  ·
  1

  1

• Reapply "Throw on Authority vs Instance/TenantId conflict (#3873)"

  #3890·Iarek Kovtunenko (iarekk) opened Jun 23, 2026Contributor·

  ·

• Fix losing certificates for credentials with CredentialSource.Certificate

  #3711·Pent Ploompuu (pentp) opened Feb 5, 2026·

  ·
  5

• Document HttpClient configuration for IDownstreamApi

  #3690·jmprieur with CopilotAI opened Jan 30, 2026·

  ·
  1

  2

  

• Adopt .NET configuration binding source generators for net8.0/net9.0 (AOT compatibility)

  #3582·jmprieur with CopilotAI opened Oct 29, 2025·8 tasks done·

  ·
  1

  3

  

• [POC] Use secure HTTP client factory and force certificate credential for token binding

  #3559·Ievgen Polyvanyi (cpp11nullptr) opened Oct 16, 2025Contributor·

  ·
  5