2.13.0

2.13.0

• Update to Wilson 6.32.0 and Microsoft.Identity.Abstractions 4.0.0

New Feature:

Support new AzureAD key issuer validator in AddMicrosoftIdentityWebApi by default. See #2323 for details.

2.12.4

2.12.4

• fix for CVE-2023-29331 in System.Security.Cryptography.Pkcs

2.12.2

2.12.2

New Feature:

• Id Web now supports the MS Graph v5 SDK, see issue #2097 for details.

2.11.1

2.11.1

• Update to MSAL 4.54.1

Bug Fix:

• Fix bug with signed assertion for AKS, see issue #2252 for details.

2.11.0

2.11.0

• Update to MSAL 4.54.0

New Features

• ID Web now supports trimming. See #2210

2.10.0

2.10.0

• Update to Wilson 6.30.0

New features:

• Microsoft.Identity.Web now provides more logging in DownstreamAPI, see #2148 for details.
• OBO support for composite tokens based assertion and sub_assertion extra query parameters. See issue #2222 for details.

Bug fixes:

• Fix a regex issue relating to same site, see #1811 for details.
• Bug fixes for CIAM support, see #2218 for details.

2.9.0

2.9.0

• Update to Wilson 6.29.0 and MSAL.NET 4.53.0

Bug Fix:

• The ASP.NET Core regression between .NET 5 and 6 with Razor Pages, is now addressed with Microsoft.Identity.Web.UI targeting .NET 5 until a more permanent solution is found. See issues #2111, #2095 and #2183 for details.

2.8.0

2.8.0

New features:

• ID Web works with Authority in place of Tenant ID and Domain. See #2160
• ID Web now supports CIAM authorities.
• Abstractions is now updated to version 3.1.0

Bug fixes:

• Fixed a bug causing ClaimsIdentity.RoleClaimType to always be "roles" when using App Service Authentication. See #2166

2.7.0

2.7.0

New Feature:

• MicrosoftIdentityAppCallsWebApiAuthenticationBuilder is now available on netstandard2.0
• Id Web now supports expressing the cache key used for serializing/deserializing. See #2156

Bug Fixes:

• Make GetClientAssertion protected.

2.6.1

2.6.1

• Update to Wilson 6.27.0 and MSAL.NET 4.51.0

New Features:

• GetClientAssertion is now public, which enables inheritance of ClientAssertionProviderBase. See PR for details.
• Id Web now uses TryAdd instead of Add in the InMemory and Distributed caches, this is to not overwrite previously added caches. See issue for details.
• Id Web now supports MsAuth10ATPop. See PR for details.

Bug Fixes:

• Fix a regression from v1.16.x to v2.5.0 with auth code redemption when the ResponseType == "code". See issue #2096 for details.

Fundamentals:

• Address compliance and build issues: #2113, #2116, #2120, #2121, #2122, #2128, #2125, and #2137.