MSAL Python 1.27 #669

rayluo · 2024-02-22T20:22:34Z

Release Notes:

New feature: remove_tokens_for_client() will remove tokens acquired by acquire_token_for_client() (Feature Request: Removing app tokens #640, [Feature Request] Support force_refresh for service principal #650, Implement remove_tokens_for_client() #666)
Performance: Throughput of token-cache-hit happy path is roughly 2x faster (Order scopes on save, and optimize the happy path for access token read #644)
Adjustment: MSAL no longer attempts to validate an ID token's time ([Bug] MSAL should not attempt to validate the ID Token #656, Tolerate ID token time errors #657)
Adjustment: Bump upstream broker dependency to 0.14.x
Improvement: Better chance to remove accounts from broker (Attempts account removal from broker first #651)
Improvement: Cleaner console output when the http local server is visited in https protocol (MSAL shows gibberish if localhost is accessed using HTTPS #546)
Improvement: Reduce a bare except clause (Don't use bare except when importing #667)

Note:

The previous preview features in previous 1.27.0b2 requires more beta testing, so they did NOT make it to 1.27.0. If you want to beta test 1.27.0b2, follow its own instruction.
MSAL Python 1.27 is the last version that still runs on Python 2.7

* Update issue templates * Update feature_request.md * Update feature_request.md * Remove excess spaces, and rename .md to .yaml --------- Co-authored-by: Ray Luo <[email protected]>

Order scopes on save, and optimize the happy path for access token read

…message

Tolerate ID token time errors

Give a hint on where the client_id came from

This is needed because our org has transitioned to a read-only GITHUB_TOKEN for GitHub Action workflows. This change fixes #653

Using a bare except statement when importing hides other errors, which then get lost when the next import fails. Co-authored-by: Ed Singleton <[email protected]>

sample/confidential_client_certificate_sample.py

@@ -70,7 +70,7 @@
            headers={'Authorization': 'Bearer ' + result['access_token']},).json()
        print("Graph API call result: %s" % json.dumps(graph_data, indent=2))
    else:
-        print("Token acquisition failed")  # Examine result["error_description"] etc. to diagnose error
+        print("Token acquisition failed", result)  # Examine result["error_description"] etc. to diagnose error


sample/confidential_client_secret_sample.py

@@ -69,7 +69,7 @@
            headers={'Authorization': 'Bearer ' + result['access_token']},).json()
        print("Graph API call result: %s" % json.dumps(graph_data, indent=2))
    else:
-        print("Token acquisition failed")  # Examine result["error_description"] etc. to diagnose error
+        print("Token acquisition failed", result)  # Examine result["error_description"] etc. to diagnose error


sample/device_flow_sample.py

@@ -91,7 +91,7 @@
            headers={'Authorization': 'Bearer ' + result['access_token']},).json()
        print("Graph API call result: %s" % json.dumps(graph_data, indent=2))
    else:
-        print("Token acquisition failed")  # Examine result["error_description"] etc. to diagnose error
+        print("Token acquisition failed", result)  # Examine result["error_description"] etc. to diagnose error


sample/interactive_sample.py

@@ -86,7 +86,7 @@
            headers={'Authorization': 'Bearer ' + result['access_token']},)
        print("Graph API call result: %s ..." % graph_response.text[:100])
    else:
-        print("Token acquisition failed")  # Examine result["error_description"] etc. to diagnose error
+        print("Token acquisition failed", result)  # Examine result["error_description"] etc. to diagnose error


sample/username_password_sample.py

@@ -73,8 +75,7 @@
            headers={'Authorization': 'Bearer ' + result['access_token']},).json()
        print("Graph API call result: %s" % json.dumps(graph_data, indent=2))
    else:
-        print("Token acquisition failed")  # Examine result["error_description"] etc. to diagnose error
-        print(result)
+        print("Token acquisition failed", result)  # Examine result["error_description"] etc. to diagnose error


sample/vault_jwt_sample.py

@@ -132,7 +132,7 @@
            headers={'Authorization': 'Bearer ' + result['access_token']},).json()
        print("Graph API call result: %s" % json.dumps(graph_data, indent=2))
    else:
-        print("Token acquisition failed")  # Examine result["error_description"] etc. to diagnose error
+        print("Token acquisition failed", result)  # Examine result["error_description"] etc. to diagnose error


msal/__main__.py

+        ) if authority and not authority.startswith(
+            "https://login.microsoftonline.com") else None


rayluo and others added 30 commits December 5, 2023 16:20

Merge branch 'release-1.26.0' into dev

e6ebc37

Update issue templates (#642)

1ae2d19

* Update issue templates * Update feature_request.md * Update feature_request.md * Remove excess spaces, and rename .md to .yaml --------- Co-authored-by: Ray Luo <[email protected]>

No more gibberish log from https request to mess up the current terminal

72b853d

Merge branch 'oauth2cli/dev' to close #546

dcedc10

AT POP with SHR is tested with Graph end-to-end

866ba2b

Sort scopes before writing to token cache

c1a0ce1

O(1) happy path for access token hits

313d721

Might as well refactor a _get_app_metadata()

5272fbd

Merge pull request #644 from AzureAD/order-scopes

804d529

Order scopes on save, and optimize the happy path for access token read

Prevent crash on token_cache.find(..., query=None)

84bdfab

Merge branch 'order-scopes' into dev

7c4c4b5

Attempts account removal from broker first

49a9198

Adding docs for PopAuthScheme

c131b9b

Tested with latest cryptography 42.x

d7331f2

Mention instance_discovery instead of validate_authority in an error …

3e68838

…message

Tolerate ID token time errors

d524595

Merge remote-tracking branch 'oauth2cli/dev' into oauth2

ba3cec0

Tolerate ID token time errors

386ea2e

Merge pull request #657 from AzureAD/id-token-adjustment

36a1267

Tolerate ID token time errors

Provide examples for B2C and CIAM

1a19c4b

Give a hint on where the client_id came from

5d9b221

Merge pull request #661 from AzureAD/document-client-id

bb97af2

Give a hint on where the client_id came from

Allow github action to write perf result into repo

4b34dd6

This is needed because our org has transitioned to a read-only GITHUB_TOKEN for GitHub Action workflows. This change fixes #653

Adding attributes that were not auto documented

b286540

Implement remove_tokens_for_client()

3b96de6

Remove premature int(...)

bb0e24a

MSAL's fallback-from-broker behavior remains a FAQ

0d8b2c2

Change back to use print(result) in error path

bf87155

CCA can be tested by: python -m msal

4f0e03d

Pick up latest PyMsalRuntime 0.14.x

59c3000

Singletoned and others added 2 commits February 22, 2024 09:35

Don't use bare except when importing (#667)

9a866ca

Using a bare except statement when importing hides other errors, which then get lost when the next import fails. Co-authored-by: Ed Singleton <[email protected]>

Releasing 1.27

7e04519

github-advanced-security bot found potential problems Feb 22, 2024

View reviewed changes

jiasli mentioned this pull request Feb 23, 2024

[Core] Use WAM as the default authentication method on Windows Azure/azure-cli#28085

Merged

rayluo merged commit 09e9078 into main Feb 23, 2024

rayluo deleted the release-1.27 branch February 23, 2024 18:59

jiasli mentioned this pull request Mar 13, 2024

{Core} Bump MSAL to 1.27.0 and pin pymsalruntime to 0.14.0 Azure/azure-cli#28556

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

MSAL Python 1.27 #669

MSAL Python 1.27 #669

rayluo commented Feb 22, 2024

Check failure

Check failure

Check failure

Check failure

Check failure

Check failure

Check failure

		) if authority and not authority.startswith(
		"https://login.microsoftonline.com") else None

MSAL Python 1.27 #669

MSAL Python 1.27 #669

Conversation

rayluo commented Feb 22, 2024

Check failure

Check failure

Check failure

Check failure

Check failure

Check failure

Check failure