cpressland/frontdoor-ipgroup-updater
Archived
Watch
1
0
Fork
You've already forked frontdoor-ipgroup-updater
 0
Code Issues 1 Pull requests 10 Projects Releases 3 Packages Wiki Activity Actions

Update dependency msal to v1.38.0 #19

Open
renovate[bot] wants to merge 1 commit from renovate/azure-ad-microsoft-authentication-library-for-python-monorepo into master
pull from: renovate/azure-ad-microsoft-authentication-library-for-python-monorepo
merge into: cpressland:master
Conversation 0 Commits 1 Files changed 1 +8 -5
renovate[bot] commented 2025-01-30 19:01:00 +00:00 (Migrated from github.com)
Copy link

This PR contains the following updates:

Package Change Age Confidence
msal (changelog) 1.18.0 → 1.38.0 age confidence

Release Notes

AzureAD/microsoft-authentication-library-for-python (msal)

v1.38.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.37.0...1.38.0

v1.37.0

Compare Source

Breaking Changes

  • Removed support for Python 3.8 in #​910

New Features

  • Add User Federated Identity Credential (user_fic) grant type support in #​918

Bug Fixes and Improvements

  • Use unsigned redirect URI for macOS broker silent flows in #​907
  • Escape username parameter in #​901
  • Forward MSAL client metadata headers through IMDS to ESTS in #​902

Dependency Updates

  • Update pymsalruntime minimum version to 0.20.6 in #​919
  • Bump cryptography dependency ceiling to <50 (N+3) in #​906

v1.36.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.35.1...1.36.0

v1.35.1

Compare Source

What's Changed

Full Changelog: https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.35.0...1.35.1

v1.35.0

Compare Source

What's Changed

Full Changelog: https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.34.0...1.35.0

v1.34.0: MSAL Python 1.34.0

Compare Source

This release includes:

  • All the changes in 1.34.0b1, plus bumping the dependency cryptography upper bound, which also drops Python 3.7 support.
  • Officially support Python 3.13

What's Changed

New Contributors

Full Changelog: https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.32.3...1.34.0

v1.33.0: MSAL Python 1.33.0

Compare Source

Re-shipping beta release 1.33.0b1 as stable 1.33.0

Highlights

  • Managed Identity on Service Fabric supports specifying client_capabilities and claims_challenge (#​791)
  • Broker support on Linux and WSL. (#​766)
  • A byproduct of this is that broker on all platforms will support Python 3.13. (#​823)

v1.32.3: MSAL Python 1.32.3

Compare Source

Fix a regression on Azure Arc / on-prem servers. (#​814, #​815)

v1.32.2: MSAL Python 1.32.2

Compare Source

Bugfix for Authentication Failed: MsalResponse object has no attribute 'headers' #​812

v1.32.1: MSAL Python 1.32.1

Compare Source

Optimization on cache.

v1.32.0: MSAL Python 1.32.0

Compare Source

Noticeable Changes

  • New feature: Supports dSTS by ClientApplication(..., authority="https://...example.com/dstsv2/...") (#​767, #​772)
  • New feature: Start to support POD Identity, configured by env var AZURE_POD_IDENTITY_AUTHORITY_HOST=http://ip:port (#​794, #​795)
  • Bugfix: Support resource with the format of "GUID/.default" when running inside Cloud Shell. (#​784, #​785)

More details

New Contributors

Full Changelog: https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.31.1...1.32.0

v1.31.1

Compare Source

  • Bugfix: The Managed Identity detection logic on Arc (#​731) had a bug #​762, now fixed in PR #​763 

Full Changelog: https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.31.0...1.31.1

v1.31.0

Compare Source

Highlight

The Broker-on-Mac feature is also blogged here

What's Changed

  • Integration with Broker-on-Mac in #​596
  • Change Managed Identity detection logic on Arc in #​731
  • Managed Identity supports CAE in #​730
  • Support Managed Identity on Azure Container Instance (ACI) with Resource id in #​741
  • Other refactoring in #​740

Full Changelog: https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.30.0...1.31.0

v1.30.0

Compare Source

What's Changed

  • New feature: Support Subject Name/Issuer authentication when using .pfx certificate file. Documentation available in one of the recent purple boxes here. #​718
  • New feature: Automatically use SHA256 and PSS padding when using .pfx certificate on non-ADFS, non-OIDC authorities. #​722
  • New feature: Expose refresh_on (if any) to fresh or cached response, so that caller may choose to proactively call acquire_token_silent() early. #​723
  • Bugfix for token cache search. MSAL 1.27+ customers please upgrade to MSAL 1.30+. #​717

Full Changelog: https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.29.0...1.30.0

v1.29.0: MSAL Python 1.29.0

Compare Source

Highlight

The Managed Identity feature is also blogged here

What's Changed

  • New feature: Supports Managed Identity for Azure VM, App Service (including Azure Functions, Azure Automation), Service Fabric, Azure Machine Learning, Arc, etc.. Comes with a sample, its configuration via ENV VAR, and its API documentation. (#​58, #​480, #​634, #​674)
  • New feature: Support reading ConfidentialClientApplication's cert from a pfx file (#​684, #​699)
  • New feature: TokenCache class has a new search() method which will return a generator of tokens. The old find() method still exists and returns a list, but MSAL 1.27+ will not call find() anymore. (#​693, #​644)
  • Change: Re-enable the username password flow to go through broker, if available. (#​712)

New Contributors

Full Changelog: https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.28.1...1.29.0

v1.28.1: MSAL Python 1.28.1

Compare Source

  • Change: pip install msal[broker] will now pick up the latest PyMsalRuntime 0.16.x which contains a bugfix for being run as administrator. This release fixes #​707.

v1.28.0: MSAL Python 1.28.0

Compare Source

  • New feature: PublicClientApplication and ConfidentialClientApplication have a new oidc_authority parameter that can be used to specify authority of any generic OpenID Connect authority, typically the customized domain for CIAM. (#​676, #​678)
  • Dropping Python 2.7

v1.27.0: MSAL Python 1.27.0

Compare Source

What's Changed

Release Notes:

  • New feature: remove_tokens_for_client() will remove tokens acquired by acquire_token_for_client() (#​640, #​650, #​666)
  • Performance: Throughput of token-cache-hit happy path is roughly 2x faster (#​644)
  • Adjustment: MSAL no longer attempts to validate an ID token's time (#​656, #​657)
  • Adjustment: Bump upstream broker dependency to 0.14.x
  • Improvement: Better chance to remove accounts from broker (#​651)
  • Improvement: Cleaner console output when the http local server is visited in https protocol (#​546)
  • Improvement: Reduce a bare except clause (#​667)

Note:

  • The previous preview features in previous 1.27.0b2 requires more beta testing, so they did NOT make it to 1.27.0. If you want to beta test 1.27.0b2, follow its own instruction.
  • MSAL Python 1.27 is the last version that still runs on Python 2.7

New Contributors

Full Changelog: https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.26.0...1.27.0

v1.26.0: MSAL Python 1.26.0

Compare Source

  • Do not auto-detect region if app developer does not opt-in to region (#​629, #​630)
  • Support Proof-of-Possession (PoP) for Public Client based on broker (#​511)

v1.25.0: MSAL Python 1.25.0

Compare Source

  • Deprecation: allow_broker will be replaced by enable_broker_on_windows (#​613)
  • Bugfix: Device Code Flow (and Username Password Flow) and its subsequent silent request will automatically bypass broker and succeed. (#​569)
  • Enhancement: acquire_token_interactive() supports running inside Docker
  • Observability: Successful token response will contain a new token_source field to indicate where the token was obtained from: identity_provider, cache or broker. (#​610)

v1.24.1: MSAL Python 1.24.1

Compare Source

Includes minor adjustments on handling acquire_token_interactive(). The scope of the issue being addressed was limited to a short-lived sign-in attempt. The potential misuse vector complexity was high, therefore it is unlikely to be reproduced in standard usage scenarios; however, out of abundance of caution, this fix is shipped to align ourselves with Microsoft's policy of secure-by-default.

v1.24.0: MSAL Python 1.24.0

Compare Source

  • Enhancement: There may be a new msal_telemetry key available in MSAL's acquire token response, currently observed when broker is enabled. Its content and format are opaque to caller. This telemetry blob allows participating apps to collect them via telemetry, and it may help future troubleshooting. (#​575)
  • Enhancement: A new enable_pii_log parameter is added into ClientApplication constructor. When enabled, the broker component may include PII (Personal Identifiable Information) in logs. This may help troubleshooting. (#​568, #​590)

v1.23.0: MSAL Python 1.23.0

Compare Source

Improvements:

  • acquire_token_for_client() will automatically look up tokens from cache (#​577). (But all other acquire_token_...() methods still require an explicit acquire_token_silent() in order to utilize token cache.)

v1.22.0: MSAL Python 1.22.0

Compare Source

New feature:

  • Support CIAM authorities in the form of "tenant.ciamlogin.com/*" (#​520)

Known issue:
The following issues were discovered after this version's release: #​563

v1.21.0: MSAL Python 1.21.0

Compare Source

The API in this new version remains the same as the previous version.

Enhancements:

  • Support getting an ssh certificate via broker (#​515)
  • Support B2C's usage pattern of using client id as a scope (#​505, #​530)
  • MSAL's token cache helper can now be used to store tokens returned by App Service's Managed Identity (#​519)
  • Switch to a new set of regional endpoints (#​513)
  • Test matrix covers Python 3.11 (#​512)

Known issue:
The following issues were discovered after this version's release: #​563

v1.20.0: MSAL Python 1.20.0

Compare Source

New feature:

If your app uses MSAL's acquire_token_interactive(), you can now opt in to use broker on Windows platform to achieve Single-Sign-On (SSO) and also obtain more secure tokens, all without switching the log-in experience to a browser. See details in this online doc, and try it out from this sample. (#​451, #​415)

For example, after utilizing this new feature, a command-line (CLI) app's login experience would look like this:
Azure CLI new login

Known issue:

The following issues were discovered after this version's release: #​563

v1.19.0: MSAL Python 1.19.0

Compare Source

  • New feature: A new ClientApplication(..., instance_discovery=False) parameter to turn off MSAL's Instance Discovery behavior. See more details in its full documentation. Also, ADFS authority will no longer trigger Instance Discovery. (#​496)
  • Enhancement: Use provided authority port when building the tenant discovery endpoint (#​484)
  • Bugfix: Fix a regression in regional endpoint which affects MSAL Python 1.14+ (#​485)
  • Enhancement: Tolerate home_account_id to be None

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [msal](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python) ([changelog](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases)) | `1.18.0` → `1.38.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/msal/1.38.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/msal/1.18.0/1.38.0?slim=true) | --- ### Release Notes <details> <summary>AzureAD/microsoft-authentication-library-for-python (msal)</summary> ### [`v1.38.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.38.0) [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.37.0...1.38.0) #### What's Changed - Fix ESRP client ID typo in release pipeline by [@&#8203;RyAuld](https://redirect.github.com/RyAuld) in [#&#8203;924](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/924) - Add OneBranch pipeline templates for CI and Release by [@&#8203;RyAuld](https://redirect.github.com/RyAuld) in [#&#8203;925](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/925) - Fix benchmark cache path and add forceBenchmarks pipeline variable by [@&#8203;RyAuld](https://redirect.github.com/RyAuld) in [#&#8203;927](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/927) - Validate region string format before use in URL construction by [@&#8203;bgavrilMS](https://redirect.github.com/bgavrilMS) in [#&#8203;921](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/921) - Fix Python 3.14 test timeout: replace utcnow() and remove tee pipe by [@&#8203;RyAuld](https://redirect.github.com/RyAuld) in [#&#8203;934](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/934) - Remove pytest-azurepipelines plugin to fix Python 3.14 stall by [@&#8203;RyAuld](https://redirect.github.com/RyAuld) in [#&#8203;936](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/936) - Migrate region discovery to IMDS /compute JSON endpoint by [@&#8203;Robbie-Microsoft](https://redirect.github.com/Robbie-Microsoft) in [#&#8203;929](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/929) - Remove redundant GitHub Actions unit-test job by [@&#8203;gladjohn](https://redirect.github.com/gladjohn) with [@&#8203;Copilot](https://redirect.github.com/Copilot) in [#&#8203;942](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/942) - Add test coverage for past expires\_on in Managed Identity by [@&#8203;gladjohn](https://redirect.github.com/gladjohn) in [#&#8203;940](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/940) - Add forwarded\_client\_claims support to confidential client flows by [@&#8203;Robbie-Microsoft](https://redirect.github.com/Robbie-Microsoft) in [#&#8203;937](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/937) - Deprecate decode\_id\_token and stop validating ID tokens ([#&#8203;911](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/911)) by [@&#8203;4gust](https://redirect.github.com/4gust) in [#&#8203;943](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/943) - Add managed identity E2E tests + self-hosted CI stages (MSAL Go [#&#8203;641](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/641) parity) by [@&#8203;gladjohn](https://redirect.github.com/gladjohn) in [#&#8203;948](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/948) - Fix cache key hash collision: length-prefix extended cache key components by [@&#8203;4gust](https://redirect.github.com/4gust) in [#&#8203;946](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/946) - Allow Azure Arc managed identity requests to forward user-assigned identity selectors by [@&#8203;gladjohn](https://redirect.github.com/gladjohn) with [@&#8203;Copilot](https://redirect.github.com/Copilot) in [#&#8203;944](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/944) - Harden regional authority validation by [@&#8203;4gust](https://redirect.github.com/4gust) in [#&#8203;951](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/951) - fix(security): pin Service Fabric managed identity TLS by [@&#8203;4gust](https://redirect.github.com/4gust) in [#&#8203;952](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/952) - Add WindowsContainerImage definition by [@&#8203;Avery-Dunn](https://redirect.github.com/Avery-Dunn) in [#&#8203;953](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/953) - Avdunn/pipeline fix by [@&#8203;Avery-Dunn](https://redirect.github.com/Avery-Dunn) in [#&#8203;954](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/954) #### New Contributors - [@&#8203;Robbie-Microsoft](https://redirect.github.com/Robbie-Microsoft) made their first contribution in [#&#8203;929](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/929) **Full Changelog**: <https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.37.0...1.38.0> ### [`v1.37.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.37.0) [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.36.0...1.37.0) #### Breaking Changes - Removed support for Python 3.8 in [#&#8203;910](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/910) #### New Features - Add User Federated Identity Credential (user\_fic) grant type support in [#&#8203;918](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/918) #### Bug Fixes and Improvements - Use unsigned redirect URI for macOS broker silent flows in [#&#8203;907](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/907) - Escape username parameter in [#&#8203;901](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/901) - Forward MSAL client metadata headers through IMDS to ESTS in [#&#8203;902](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/902) #### Dependency Updates - Update pymsalruntime minimum version to 0.20.6 in [#&#8203;919](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/919) - Bump cryptography dependency ceiling to <50 (N+3) in [#&#8203;906](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/906) ### [`v1.36.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.36.0) [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.35.1...1.36.0) #### What's Changed - Fix the PoP flow in the console app by [@&#8203;PetarSDimov](https://redirect.github.com/PetarSDimov) in [#&#8203;887](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/887) - Add ADO CI, SDL, and release pipelines with e2e test enablement by [@&#8203;RyAuld](https://redirect.github.com/RyAuld) in [#&#8203;890](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/890) - Add documentation for Managed Identity v2 Hackathon by [@&#8203;gladjohn](https://redirect.github.com/gladjohn) in [#&#8203;885](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/885) - Potential fix for code scanning alert no. 74: Workflow does not contain permissions by [@&#8203;Avery-Dunn](https://redirect.github.com/Avery-Dunn) in [#&#8203;884](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/884) - Added withFmi method for cca app by [@&#8203;4gust](https://redirect.github.com/4gust) in [#&#8203;876](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/876) - Use cryptographically secure randomness for PKCE, state, and nonce generation by [@&#8203;ashok672](https://redirect.github.com/ashok672) in [#&#8203;894](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/894) - Fix OIDC issuer domain spoofing in B2C host validation by [@&#8203;4gust](https://redirect.github.com/4gust) in [#&#8203;896](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/896) #### New Contributors - [@&#8203;PetarSDimov](https://redirect.github.com/PetarSDimov) made their first contribution in [#&#8203;887](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/887) - [@&#8203;gladjohn](https://redirect.github.com/gladjohn) made their first contribution in [#&#8203;885](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/885) **Full Changelog**: <https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.35.1...1.36.0> ### [`v1.35.1`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.35.1) [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.35.0...1.35.1) ##### What's Changed - Instance discovery remains cloud local on known clouds by [@&#8203;bgavrilMS](https://redirect.github.com/bgavrilMS) in [#&#8203;875](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/875) **Full Changelog**: <https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.35.0...1.35.1> ### [`v1.35.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.35.0) [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.34.0...1.35.0) #### What's Changed - Set Redirect Uri for broker silent flow on Linux platform by [@&#8203;xinyuxu1026](https://redirect.github.com/xinyuxu1026) in [#&#8203;846](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/846) - ROPC deprecation by [@&#8203;Ugonnaak1](https://redirect.github.com/Ugonnaak1) in [#&#8203;855](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/855) - Update pymsalruntime version range to handle the latest 0.20.0 release by [@&#8203;DharshanBJ](https://redirect.github.com/DharshanBJ) in [#&#8203;858](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/858) - Document how to enable sha256 for client credential by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;833](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/833) - Remove the reliance on getfqdn() by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;859](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/859) - Thumbprint for certificate made optional by [@&#8203;vi7us](https://redirect.github.com/vi7us) in [#&#8203;835](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/835) - Support Python 3.14 by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;861](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/861) - Add form\_post response mode support for system browser authentication by [@&#8203;ashok672](https://redirect.github.com/ashok672) in [#&#8203;868](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/868) - Add OIDC issuer validation by [@&#8203;Avery-Dunn](https://redirect.github.com/Avery-Dunn) in [#&#8203;840](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/840) - Security: Remove unsafe PowerShell fallback in WSL by [@&#8203;RinZ27](https://redirect.github.com/RinZ27) in [#&#8203;866](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/866) **Full Changelog**: <https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.34.0...1.35.0> ### [`v1.34.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.34.0): MSAL Python 1.34.0 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.33.0...1.34.0) This release includes: - All the changes in 1.34.0b1, plus bumping the dependency `cryptography` upper bound, which also drops Python 3.7 support. - Officially support Python 3.13 #### What's Changed - ManagedIdentityClient(..., client\_capabilities=\["cp1"]).acquire\_token\_for\_client(..., claims\_challenge="...") by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;791](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/791) - Update deprecated TokenCache API usage by [@&#8203;pvaneck](https://redirect.github.com/pvaneck) in [#&#8203;805](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/805) - Enable broker support on Linux for WSL by [@&#8203;DharshanBJ](https://redirect.github.com/DharshanBJ) in [#&#8203;766](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/766) - Fix username/password validation in broker test by [@&#8203;emmanuel-ferdman](https://redirect.github.com/emmanuel-ferdman) in [#&#8203;807](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/807) - Merge release 1.32.3 back to dev branch by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;816](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/816) - Add dependency management suggestions by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;819](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/819) - Remind developers about http\_cache's unstable format by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;821](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/821) - Properly throw MsalServiceError exception by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;820](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/820) - Improve test cases to test header-less response by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;822](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/822) - Upgrade dependency by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;824](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/824) - Linux broker needs a specific redirect\_uri by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;826](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/826) - MSAL Python 1.33.0b1 release by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;827](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/827) - Use lowercase environment value during searching by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;831](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/831) - Add claims challenge parameter in initiate\_device\_flow by [@&#8203;ashok672](https://redirect.github.com/ashok672) in [#&#8203;839](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/839) - MSAL Python 1.33.0 by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;841](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/841) - Declare support for Python 3.13 by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;851](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/851) #### New Contributors - [@&#8203;pvaneck](https://redirect.github.com/pvaneck) made their first contribution in [#&#8203;805](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/805) - [@&#8203;emmanuel-ferdman](https://redirect.github.com/emmanuel-ferdman) made their first contribution in [#&#8203;807](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/807) - [@&#8203;ashok672](https://redirect.github.com/ashok672) made their first contribution in [#&#8203;839](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/839) **Full Changelog**: <https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.32.3...1.34.0> ### [`v1.33.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.33.0): MSAL Python 1.33.0 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.32.3...1.33.0) Re-shipping [beta release 1.33.0b1](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.33.0b1) as stable 1.33.0 #### Highlights - Managed Identity on Service Fabric supports specifying `client_capabilities` and `claims_challenge` ([#&#8203;791](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/791)) - Broker support on Linux and WSL. ([#&#8203;766](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/766)) - A byproduct of this is that broker on all platforms will support Python 3.13. ([#&#8203;823](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/823)) ### [`v1.32.3`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.32.3): MSAL Python 1.32.3 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.32.2...1.32.3) Fix a regression on Azure Arc / on-prem servers. ([#&#8203;814](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/814), [#&#8203;815](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/815)) ### [`v1.32.2`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.32.2): MSAL Python 1.32.2 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.32.1...1.32.2) Bugfix for Authentication Failed: MsalResponse object has no attribute 'headers' [#&#8203;812](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/812) ### [`v1.32.1`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.32.1): MSAL Python 1.32.1 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.32.0...1.32.1) Optimization on cache. ### [`v1.32.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.32.0): MSAL Python 1.32.0 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.31.1...1.32.0) #### Noticeable Changes - New feature: Supports dSTS by `ClientApplication(..., authority="https://...example.com/dstsv2/...")` ([#&#8203;767](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/767), [#&#8203;772](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/772)) - New feature: Start to support POD Identity, configured by env var `AZURE_POD_IDENTITY_AUTHORITY_HOST=http://ip:port` ([#&#8203;794](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/794), [#&#8203;795](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/795)) - Bugfix: Support resource with the format of "GUID/.default" when running inside Cloud Shell. ([#&#8203;784](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/784), [#&#8203;785](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/785)) #### More details - Refactor to allow adding new field into cache key and/or content by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;751](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/751) - Warning when obsolete msal-extensions is detected by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;752](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/752) - Add msal\_cache.bin to .gitignore by [@&#8203;DharshanBJ](https://redirect.github.com/DharshanBJ) in [#&#8203;753](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/753) - MSAL will use env var MSAL\_FORCE\_REGION by default by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;756](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/756) - ~~allow MI endpoint changing through environment variable by [@&#8203;jimdigriz](https://redirect.github.com/jimdigriz) in [#&#8203;754](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/754)~~ - Revert "allow MI endpoint changing through environment variable" by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;769](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/769) - Fix document for using `SystemAssigned` managed identity by [@&#8203;jiasli](https://redirect.github.com/jiasli) in [#&#8203;764](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/764) - Suppress a false positive CodeQL alarm by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;783](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/783) - Pass Sku and Ver to MsalRuntime by [@&#8203;Ugonnaak1](https://redirect.github.com/Ugonnaak1) in [#&#8203;786](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/786) - Try to suppress another verify=False by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;788](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/788) - Supports dSTS by ClientApplication(..., authority="<https://...example.com/dstsv2/>...") by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;772](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/772) - Add test case to show that OBO supports SP by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;481](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/481) - Enable Issue-Sentinel to scan for similar issues by [@&#8203;DharshanBJ](https://redirect.github.com/DharshanBJ) in [#&#8203;790](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/790) - Support pod identity by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;795](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/795) - Scope to resource by [@&#8203;rayluo](https://redirect.github.com/rayluo) in [#&#8203;785](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/785) #### New Contributors - [@&#8203;DharshanBJ](https://redirect.github.com/DharshanBJ) made their first contribution in [#&#8203;753](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/753) - [@&#8203;jimdigriz](https://redirect.github.com/jimdigriz) made their first contribution in [#&#8203;754](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/754) - [@&#8203;Ugonnaak1](https://redirect.github.com/Ugonnaak1) made their first contribution in [#&#8203;786](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/786) **Full Changelog**: <https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.31.1...1.32.0> ### [`v1.31.1`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.31.1) [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.31.0...1.31.1) - Bugfix: The Managed Identity detection logic on Arc ([#&#8203;731](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/731)) had a bug [#&#8203;762](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/762), now fixed in PR [#&#8203;763](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/763)  **Full Changelog**: <https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.31.0...1.31.1> ### [`v1.31.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.31.0) [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.30.0...1.31.0) #### Highlight The Broker-on-Mac feature is also blogged [here](https://den.dev/blog/msal-python-new-features/) #### What's Changed - Integration with Broker-on-Mac in [#&#8203;596](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/596) - Change Managed Identity detection logic on Arc in [#&#8203;731](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/731) - Managed Identity supports CAE in [#&#8203;730](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/730) - Support Managed Identity on Azure Container Instance (ACI) with Resource id in [#&#8203;741](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/741) - Other refactoring in [#&#8203;740](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/740) **Full Changelog**: <https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.30.0...1.31.0> ### [`v1.30.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.30.0) [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.29.0...1.30.0) #### What's Changed - New feature: Support Subject Name/Issuer authentication when using .pfx certificate file. Documentation available in one of the recent purple boxes [here](https://msal-python.readthedocs.io/en/latest/#msal.ClientApplication.params.client_credential). [#&#8203;718](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/718) - New feature: Automatically use SHA256 and PSS padding when using .pfx certificate on non-ADFS, non-OIDC authorities. [#&#8203;722](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/722) - New feature: Expose `refresh_on` (if any) to fresh or cached response, so that caller may choose to proactively call `acquire_token_silent()` early. [#&#8203;723](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/723) - Bugfix for token cache search. MSAL 1.27+ customers please upgrade to MSAL 1.30+. [#&#8203;717](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/717) **Full Changelog**: <https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.29.0...1.30.0> ### [`v1.29.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.29.0): MSAL Python 1.29.0 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.28.1...1.29.0) #### Highlight The Managed Identity feature is also blogged [here](https://den.dev/blog/msal-python-new-features/) #### What's Changed - New feature: Supports Managed Identity for Azure VM, App Service (including Azure Functions, Azure Automation), Service Fabric, Azure Machine Learning, Arc, etc.. Comes with [a sample](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/blob/dev/sample/managed_identity_sample.py), its [configuration via ENV VAR](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/blob/dev/sample/.env.sample.managed_identity), and its [API documentation](https://msal-python.readthedocs.io/en/latest/#managed-identity). ([#&#8203;58](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/58), [#&#8203;480](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/480), [#&#8203;634](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/634), [#&#8203;674](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/674)) - New feature: Support reading `ConfidentialClientApplication`'s cert from a pfx file ([#&#8203;684](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/684), [#&#8203;699](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/699)) - New feature: TokenCache class has a new `search()` method which will return a generator of tokens. The old `find()` method still exists and returns a list, but MSAL 1.27+ will not call `find()` anymore. ([#&#8203;693](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/693), [#&#8203;644](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/644)) - Change: Re-enable the username password flow to go through broker, if available. ([#&#8203;712](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/712)) #### New Contributors - [@&#8203;fengga](https://redirect.github.com/fengga) made their first contribution in [#&#8203;712](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/712) **Full Changelog**: <https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.28.1...1.29.0> ### [`v1.28.1`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.28.1): MSAL Python 1.28.1 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.28.0...1.28.1) - Change: `pip install msal[broker]` will now pick up the latest PyMsalRuntime 0.16.x which contains a bugfix for being run as administrator. This release fixes [#&#8203;707](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/707). ### [`v1.28.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.28.0): MSAL Python 1.28.0 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.27.0...1.28.0) - New feature: `PublicClientApplication` and `ConfidentialClientApplication` have a new `oidc_authority` parameter that can be used to specify authority of any generic OpenID Connect authority, typically the customized domain for CIAM. ([#&#8203;676](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/676), [#&#8203;678](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/678)) - Dropping Python 2.7 ### [`v1.27.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.27.0): MSAL Python 1.27.0 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.26.0...1.27.0) #### What's Changed Release Notes: - New feature: `remove_tokens_for_client()` will remove tokens acquired by `acquire_token_for_client()` ([#&#8203;640](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/640), [#&#8203;650](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/650), [#&#8203;666](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/666)) - Performance: Throughput of token-cache-hit happy path is [roughly 2x faster](https://azuread.github.io/microsoft-authentication-library-for-python/dev/bench/) ([#&#8203;644](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/644)) - Adjustment: MSAL no longer attempts to validate an ID token's time ([#&#8203;656](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/656), [#&#8203;657](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/657)) - Adjustment: Bump upstream broker dependency to 0.14.x - Improvement: Better chance to remove accounts from broker ([#&#8203;651](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/651)) - Improvement: Cleaner console output when the http local server is visited in https protocol ([#&#8203;546](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/546)) - Improvement: Reduce a bare `except` clause ([#&#8203;667](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/667)) Note: - The [previous preview features in previous `1.27.0b2`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.27.0b1) requires more beta testing, so they did NOT make it to `1.27.0`. If you want to beta test `1.27.0b2`, follow its own instruction. - MSAL Python 1.27 is the last version that still runs on Python 2.7 #### New Contributors - [@&#8203;Singletoned](https://redirect.github.com/Singletoned) made their first contribution in [#&#8203;667](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/667) **Full Changelog**: <https://github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.26.0...1.27.0> ### [`v1.26.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.26.0): MSAL Python 1.26.0 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.25.0...1.26.0) - Do not auto-detect region if app developer does not opt-in to region ([#&#8203;629](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/629), [#&#8203;630](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/630)) - Support Proof-of-Possession (PoP) for Public Client based on broker ([#&#8203;511](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/511)) ### [`v1.25.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.25.0): MSAL Python 1.25.0 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.24.1...1.25.0) - Deprecation: `allow_broker` will be replaced by `enable_broker_on_windows` ([#&#8203;613](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/613)) - Bugfix: Device Code Flow (and Username Password Flow) and its subsequent silent request will automatically bypass broker and succeed. ([#&#8203;569](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/569)) - Enhancement: `acquire_token_interactive()` supports running inside Docker - Observability: Successful token response will contain a new `token_source` field to indicate where the token was obtained from: `identity_provider`, `cache` or `broker`. ([#&#8203;610](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/610)) ### [`v1.24.1`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.24.1): MSAL Python 1.24.1 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.24.0...1.24.1) Includes minor adjustments on handling acquire\_token\_interactive(). The scope of the issue being addressed was limited to a short-lived sign-in attempt. The potential misuse vector complexity was high, therefore it is unlikely to be reproduced in standard usage scenarios; however, out of abundance of caution, this fix is shipped to align ourselves with Microsoft's policy of secure-by-default. ### [`v1.24.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.24.0): MSAL Python 1.24.0 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.23.0...1.24.0) - Enhancement: There may be a new `msal_telemetry` key available in MSAL's acquire token response, currently observed when broker is enabled. Its content and format are opaque to caller. This telemetry blob allows participating apps to collect them via telemetry, and it may help future troubleshooting. ([#&#8203;575](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/575)) - Enhancement: A new `enable_pii_log` parameter is added into `ClientApplication` constructor. When enabled, the broker component may include PII (Personal Identifiable Information) in logs. This may help troubleshooting. ([#&#8203;568](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/568), [#&#8203;590](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/590)) ### [`v1.23.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.23.0): MSAL Python 1.23.0 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.22.0...1.23.0) Improvements: - `acquire_token_for_client()` will automatically look up tokens from cache ([#&#8203;577](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/577)). (But all other `acquire_token_...()` methods still require an explicit `acquire_token_silent()` in order to utilize token cache.) ### [`v1.22.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.22.0): MSAL Python 1.22.0 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.21.0...1.22.0) New feature: - Support CIAM authorities in the form of "tenant.ciamlogin.com/\*" ([#&#8203;520](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/520)) Known issue: The following issues were discovered after this version's release: [#&#8203;563](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/563) ### [`v1.21.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.21.0): MSAL Python 1.21.0 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.20.0...1.21.0) The API in this new version remains the same as the previous version. Enhancements: - Support getting an ssh certificate via broker ([#&#8203;515](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/515)) - Support B2C's usage pattern of using client id as a scope ([#&#8203;505](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/505), [#&#8203;530](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/530)) - MSAL's token cache helper can now be used to store tokens returned by App Service's Managed Identity ([#&#8203;519](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/519)) - Switch to a new set of regional endpoints ([#&#8203;513](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/513)) - Test matrix covers Python 3.11 ([#&#8203;512](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/512)) Known issue: The following issues were discovered after this version's release: [#&#8203;563](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/563) ### [`v1.20.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.20.0): MSAL Python 1.20.0 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.19.0...1.20.0) ##### New feature: If your app uses MSAL's `acquire_token_interactive()`, you can now opt in to use broker on Windows platform to achieve Single-Sign-On (SSO) and also obtain more secure tokens, all without switching the log-in experience to a browser. See details in [this online doc](https://msal-python.readthedocs.io/en/latest/#msal.PublicClientApplication), and try it out from [this sample](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/blob/1.32.0/sample/interactive_sample.py#L48). ([#&#8203;451](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/451), [#&#8203;415](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/pull/415)) For example, after utilizing this new feature, a command-line (CLI) app's login experience would look like this: ![Azure CLI new login](https://user-images.githubusercontent.com/4003950/189288676-868b4df8-1647-4f05-821f-9a91e50796df.png) ##### Known issue: The following issues were discovered after this version's release: [#&#8203;563](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/563) ### [`v1.19.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/releases/tag/1.19.0): MSAL Python 1.19.0 [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/compare/1.18.0...1.19.0) - New feature: A new `ClientApplication(..., instance_discovery=False)` parameter to turn off MSAL's Instance Discovery behavior. See more details in its [full documentation](https://msal-python.readthedocs.io/en/latest/#msal.PublicClientApplication.params.instance_discovery). Also, ADFS authority will no longer trigger Instance Discovery. ([#&#8203;496](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/496)) - Enhancement: Use provided authority port when building the tenant discovery endpoint ([#&#8203;484](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/484)) - Bugfix: Fix a regression in regional endpoint which affects MSAL Python 1.14+ ([#&#8203;485](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/issues/485)) - Enhancement: [Tolerate home\_account\_id to be None](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-python/commit/053af22a7204b036c4ca3d9d0add7e3b2204e50b) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/cpressland/frontdoor-ipgroup-updater). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDUuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjM5LjAiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIiLCJsYWJlbHMiOltdfQ==-->
Commenting is not possible because the repository is archived.
Reviewers
No reviewers
Labels
Clear labels   
bug
Something isn't working

  
documentation
Improvements or additions to documentation

  
duplicate
This issue or pull request already exists

  
enhancement
New feature or request

  
good first issue
Good for newcomers

  
help wanted
Extra attention is needed

  
invalid
This doesn't seem right

  
question
Further information is requested

  
wontfix
This will not be worked on

No labels
bug
documentation
duplicate
enhancement
good first issue
help wanted
invalid
question
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
cpressland/frontdoor-ipgroup-updater!19
No description provided.