Bump Microsoft.Identity.Client from 4.10.0 to 4.17.0 in /src/02-Corporate

[dependabot-preview]

Bumps Microsoft.Identity.Client from 4.10.0 to 4.17.0.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.17.0

New Features:

Addition of an enum TokenSource to indicate the source of a token which can be cache, identity provider or broker. Issue for details

Bug Fixes:

Fix for CryptographicException when using CNG certificate. Added support for .net classic 4.6.1. Issue for details Fix for ArgumentNullException thrown by MsalExtensionException constructor. Issue for details Reduce response time for GetDeviceId. MSAL now will disable MATS telemetry if it is not configured. Issue for details Fix for System.Net.HttpListenerException when system browser flow is cancelled. Issue for details

4.16.1

Bug Fixes

• Improved error message for embedded webview http redirect failure. Issue for details
• SuggestedCacheKey property in TokenCacheNotificationArgs now works correctly in the case of AcquireTokenByAuthorizationCode. Issue for details

4.16.0

New Features

MSAL exposes a SuggestedCacheKey property in TokenCacheNotificationArgs. This property will help determine the token cache location in web site / web API / daemon app scenarios, making it easier to adapt MSAL's token cache to a general purpose distributed cache. Issue for details

MSAL hardens its HTTP stack to prevent port exhaustion. Before this improvement, MSAL would use an HttpClient object for each request. In high scale scenarios, this can lead to port exhaustion, as disposing of HttpClient does not release ports. With this improvement, MSAL uses a static HttpClient, which prevents port exhaustion, combined with platform specific techniques to respect DNS changes. This change affects .NET classic and .NET core implementations. Issue for details

Bug Fixes

MSAL no longer misses the cache when an empty scope is requested. Issue for details

MSAL.NET 4.15.0

4.15.0

New Features:

MSAL has been upgraded to use Android X. MSAL.NET will now use the latest Android SDKs for it's Xamarin.Android platform. Issue for details

GetAccounts() can now filter by user flow for B2C accounts. MSAL's GetAccounts() api will now allow you to pass in a user flow to filter B2C accounts when quering the cache. Issue for details

Bug Fixes:

MSAL can now migrate from ADALV3 to MSALV3 when multiple resourceId's are used. MSAL will now ignore ADAL resource strings when fetching RT to enable migration from ADALV3 to MSALV3 cachetokens. Issue for details

MSAL will now maintain the correlation ID of the authentication request with broker specific interactions throughout it's entire execution. Issue for details

MSAL will now return the correct value for ExpiresOn in the authentication result during brokered authentication. Issue for details

MSAL now has improved logic for AcquireTokenSilent(), GetAccounts() and RemoveAccount() during brokered authentication. During brokered authentication, MSAL will now check its local cache for tokens first before sending the silent authentication request to broker. GetAccounts() will now merge the accounts from the local MSAL and broker caches when returning results. RemoveAccount() will now remove the account from both the local cache and the broker cache. Issue for details

MSAL now has better error reporting during Integrated Windows Authentication. MSAL will now return the error in the body on WsTrust parse errors. Issue for details

Changelog

Sourced from Microsoft.Identity.Client's changelog.

4.17.0

New Features:

Addition of an enum TokenSource to indicate the source of a token which can be cache, identity provider or broker. Issue for details

Bug Fixes:

Fix for CryptographicException when using CNG certificate. Added support for .net classic 4.6.1. Issue for details Fix for ArgumentNullException thrown by MsalExtensionException constructor. Issue for details Reduce response time for GetDeviceId. MSAL now will disable MATS telemetry if it is not configured. Issue for details Fix for System.Net.HttpListenerException when system browser flow is cancelled. Issue for details

4.16.1

Bug Fixes:

Improved error message for embedded webview http redirect failure. Issue for details SuggestedCacheKey property in TokenCacheNotificationArgs now works correctly in the case of AcquireTokenByAuthorizationCode. Issue for details

4.16

New Features:

MSAL exposes a SuggestedCacheKey property in TokenCacheNotificationArgs. This property will help determine the token cache location in web site / web api / daemon app scenarios, making it easier to adapt MSAL's token cache to a general purpose distributed cache. Issue for details

MSAL hardnes its HTTP stack to prevent port exhaustion. Before this improvement, MSAL would use an HttpClient object for each request. In high scale scenarios, this can lead to port exhaustion, as disposing of HttpClient does not release ports. With this improvement, MSAL uses a static HttpClient, which prevents port exhaustion, combined with platform specific techniques to respect DNS changes. This change affects .net classic and .net core implementations. Issue for details

Bug Fixes:

MSAL no longer misses the cache when an empty scope is requested. Issue for details

4.15

New Features:

MSAL has been upgraded to use Android X. MSAL.NET will now use the latest Android SDKs for it's Xamarin.Android platform. Issue for details

GetAccounts() can now filter by user flow for B2C accounts. MSAL's GetAccounts() api will now allow you to pass in a user flow to filter B2C accounts when quering the cache. Issue for details

Bug Fixes:

MSAL can now migrate from ADALV3 to MSALV3 when multiple resourceId's are used. MSAL will now ignore ADAL resource strings when fetching RT to enable migration from ADALV3 to MSALV3 cachetokens. Issue for details

MSAL will now maintain the correlation ID of the authentication request with broker specific interactions throughout it's entire execution. Issue for details

MSAL will now return the correct value for ExpiresOn in the authentication result during brokered authentication. Issue for details

Commits

• f3f5d21 Update changelog (#1960)
• 5ed8828 Disable py cache integration tests due to MSAL py bug (#1957)
• e118b7f Extract error details from Android broker silent flow (#1958)
• d9f1822 Fix device code flow E2E tests (#1955)
• 79964a0 Adding better handling of broker service exceptions and additional logging (#...
• edafefa Add support for .net classic 4.6.1 (#1953)
• ac7671e Remove unsused MsalExtensionException (#1949)
• afbd227 Fix for #1773 - defautl system browser + cancellation (#1944)
• 15e84d8 WIP Clear ADAL cache during error (#1935)
• bee0a01 Add token source enum (#1933)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[dependabot-preview]

Superseded by #60.