Repository navigation

Add forwarded_client_claims support to confidential client flows - #937

Merged

Robbie-Microsoft merged 13 commits into

devfrom

rginsburg/client_claims

Jul 16, 2026

Commits on Jun 26, 2026
- Add client_claims support to confidential client and managed identity flows
  
  Robbie-Microsoft
  and
  Copilot
  committed
  1e81544
- Extend client_claims to all confidential client flows (OBO, FIC, auth code, silent)
  
  Robbie-Microsoft
  and
  Copilot
  committed
  d9aa21b
- Address Copilot review: harden client_claims validation and docs
  
  Robbie-Microsoft
  and
  Copilot
  committed
  dd8351a
Commits on Jun 30, 2026
- Rename per-request param to forwarded_client_claims; add merge test
  
  Robbie-Microsoft
  and
  Copilot
  committed
  6b8fac0
Commits on Jul 1, 2026
- Harden forwarded_client_claims (cross-MSAL review fixes)
  
  Robbie-Microsoft
  and
  Copilot
  committed
  4fc3639
- Revert ext-cache-key to MSAL .NET byte-parity (undo hardening fix #1)
  
  Robbie-Microsoft
  and
  Copilot
  committed
  f8040e4
- Preserve caller-provided data mapping in silent client-claims stash
  
  Robbie-Microsoft
  and
  Copilot
  committed
  d1648e8
- Redact client_claims/claims in TokenCache.add() debug log
  
  Robbie-Microsoft
  and
  Copilot
  committed
  a7f73d3
- Document client_claims as a cache-key-only pseudo-parameter in _compute_ext_cache_key
  
  Robbie-Microsoft
  and
  Copilot
  committed
  d288719
Commits on Jul 10, 2026
- Limit forwarded_client_claims to confidential client; drop managed identity
  
  Robbie-Microsoft
  and
  Copilot
  committed
  f7a2d35
- Address Copilot review nits: docstring wrap and test split
  
  Robbie-Microsoft
  and
  Copilot
  committed
  aeff27f
Commits on Jul 16, 2026
- Normalize forwarded_client_claims docstrings for consistency
  
  Robbie-Microsoft
  and
  Copilot
  committed
  e14b0d5
- Clarify why client_claims and claims are both redacted in add() log
  
  Robbie-Microsoft
  and
  Copilot
  committed
  adb1513

Navigation Menu

Repository navigation

Add forwarded_client_claims support to confidential client flows - #937

Add forwarded_client_claims support to confidential client flows#937
Robbie-Microsoft merged 13 commits into
devfrom
rginsburg/client_claims

Commits on Jun 26, 2026

Add client_claims support to confidential client and managed identity flows

Extend client_claims to all confidential client flows (OBO, FIC, auth code, silent)

Address Copilot review: harden client_claims validation and docs

Commits on Jun 30, 2026

Rename per-request param to forwarded_client_claims; add merge test

Commits on Jul 1, 2026

Harden forwarded_client_claims (cross-MSAL review fixes)

Revert ext-cache-key to MSAL .NET byte-parity (undo hardening fix #1)

Preserve caller-provided data mapping in silent client-claims stash

Redact client_claims/claims in TokenCache.add() debug log

Document client_claims as a cache-key-only pseudo-parameter in _compute_ext_cache_key

Commits on Jul 10, 2026

Limit forwarded_client_claims to confidential client; drop managed identity

Address Copilot review nits: docstring wrap and test split

Commits on Jul 16, 2026

Normalize forwarded_client_claims docstrings for consistency

Clarify why client_claims and claims are both redacted in add() log