bgavrilMS

Partitioned in-memory MSAL token cache, keyed by audience (Microsoft.Identity.Web)

Context

Microsoft.Identity.Web's built-in MsalMemoryTokenCacheProvider (registered via services.AddInMemoryTokenCaches()) exposes a virtual GetSuggestedCacheKey(TokenCacheNotificationArgs args) method that looks like a natural extension point for customizing the cache key (e.g. to partition by audience/resource, in addition to the default homeAccountId / ClientId+TenantId key).

However, this hook is not actually invoked when using the standard ASP.NET Core DI-based

bgavrilMS

//See below for a replacement of "ClientSecretCredential". 
//For a full sample showcasing "ManagedIdentityCredential" see https://github.com/Azure-Samples/active-directory-dotnetcore-daemon-v2/tree/master/6-Call-OwnApi-ManagedIdentity


// Config json (can be programatic too)
/*
{
    "AzureAd": {
        "Instance": "https://login.microsoftonline.com/",
		"TenantId": "[Enter here the tenantID or domain name for your Azure AD tenant]",

bgavrilMS

using Microsoft.Extensions.Caching.Memory;
using Microsoft.Extensions.Options;
using Microsoft.Identity.Client; // Microsoft.Identity.Client nuget package
using Microsoft.Identity.Web.TokenCacheProviders.InMemory; // Microsoft.Identity.Web.TokenCache nuget package

internal class Program
{
    private static async Task Main(string[] args)
    {
        TokenAcquirer tokenAcquirer = new TokenAcquirer();

bgavrilMS

    internal class Program
    {
        static void Main(string[] args)
        {
            

            Console.WriteLine("Hello, World!");
        }

    }

bgavrilMS

 // This already exists, no changes
 class NetworkRequest
 {
     public string Url;
     public string Method;
     public string Body;
     public Dictionary<string, string> Headers;
 }

bgavrilMS

# 1. One time setup: install GH CLI https://cli.github.com/
# 2. Update $issue_to_clone and $target_repos variables
# 3. Manually update the project if needed (e.g. Customer Trust). Labels should be automatically cloned.

# Config - step 1
$issue_to_clone = "https://github.com/AzureAD/microsoft-authentication-library-for-java/issues/757"

$repo_java    = 'https://github.com/AzureAD/microsoft-authentication-library-for-java/'
$repo_go      = 'https://github.com/AzureAD/microsoft-authentication-library-for-go/'   
$repo_py      = 'https://github.com/AzureAD/microsoft-authentication-library-for-python/'    

bgavrilMS

using System;
using System.Diagnostics.Tracing;

namespace ConsoleApp2.p4
{
    /// <summary>
    ///  With Global PII setting.
    /// </summary>
    public class Prototype4
    {

bgavrilMS

using System;
using System.Diagnostics.Tracing;
using Windows.Security.Authentication.Web.Core;

namespace ConsoleApp2
{
    internal class Program
    {
        static void Main(string[] args)
        {

bgavrilMS

 Console.WriteLine("Hello World!");

            //WellKnownSidType sid = WellKnownSidType.;
            //FileSystemRights rights = FileSystemRights.FullControl;
            //AccessControlType controlType = AccessControlType.Allow;

            FileSecurity security = new FileSecurity();
            var rights = FileSystemRights.Read | FileSystemRights.Write;

            var adminIdentifier = new SecurityIdentifier(WellKnownSidType.BuiltinAdministratorsSid, null);

bgavrilMS

using System;
using System.Net;
using System.Net.Http;
using System.Threading.Tasks;

namespace ConsoleApp2
{
    class Program
    {
        static void Main(string[] args)