-
Notifications
You must be signed in to change notification settings - Fork 36
Use single FRT #1470
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Use single FRT #1470
Conversation
…action is required
# Conflicts: # IdentityCore/src/MSIDConstants.h # IdentityCore/src/requests/MSIDInteractiveAuthorizationCodeRequest.m
…re flight sent by broker
# Conflicts: # changelog.txt
… states: - On - Off - Ignore, keep as is
@@ -60,6 +62,11 @@ | |||
NSString *const MSID_THROTTLING_METADATA_KEYCHAIN = @"com.microsoft.identity.throttling.metadata"; | |||
NSString *const MSID_THROTTLING_METADATA_KEYCHAIN_VERSION = @"Ver1"; | |||
|
|||
NSString *const MSID_USE_SINGLE_FRT_KEYCHAIN = @"useSingleFRT"; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
nit: can we also update "buttler" app to read this new keychain?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes, I will update it
@@ -241,7 +275,21 @@ - (MSIDRefreshToken *)getRefreshableTokenWithAccount:(MSIDAccountIdentifier *)ac | |||
|
|||
if (refreshToken) | |||
{ | |||
MSID_LOG_WITH_CTX(MSIDLogLevelVerbose, context, @"(Default accessor) Found %@refresh token by home account id", credentialType == MSIDPrimaryRefreshTokenType ? @"primary " : @""); | |||
NSString *credentialTypeString = nil; | |||
if (credentialType == MSIDPrimaryRefreshTokenType) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
can we read this directly from refreshToken? i.e:
[refreshToken credentialTypeString]
We will be able to reuse it in another places too.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Updated with existing method [MSIDCredentialTypeHelpers credentialTypeAsString:credentialType]
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hi @juan-arias is there a rollout plan and can we make sure the single FRT is one when running MSAL and Broker automations?
Please double check by having this feature on and run against the automation pipeline |
# Conflicts: # changelog.txt
… use method from MSIDAccountCredentialCache instead. Update usage and tests.
# Conflicts: # changelog.txt
MSAL C++ errors are happening because of the new enum |
Proposed changes
Update the use of family refresh tokens, and instead use a single family refresh token.
Type of change
Risk
Additional information