All pull requests

Pull requests

• Fix managed identity credential recovery after initial assertion failure

  #4081·Bernd Verst (berndverst) opened Oct 2, 2026·4 tasks done·

  ·
  1

• Post-4.16.0 release

  #4079·Neha Bhargava (neha-bhargava) opened Sep 30, 2026Contributor·

  ·

• Bump brace-expansion in /tests/DevApps/SidecarAdapter/typescript

  dependenciesjavascript
  #4078·dependabot[bot] opened Sep 30, 2026Bot·

  ·

• Fix agent cache isolation by blueprint and agent

  #4076·Nilesh Choudhary (4gust) opened Sep 29, 2026Contributor·3 of 4 tasks·

  ·
  5

• Bump the github-actions group across 1 directory with 3 updates

  dependenciesgithub_actions
  #4073·dependabot[bot] opened Sep 28, 2026Bot·

  ·

• Add .NET 11 targeting to Microsoft Identity Web

  #4068·Daniel Roth (danroth27) opened Sep 24, 2026Collaborator·

  ·
  20

• Support .NET 11 automatic CSRF protection on logout

  #4066·Daniel Roth (danroth27) opened Sep 24, 2026Collaborator·

  ·
  15

• Isolate configured token cache providers

  #4014·Ignacio Inglese (iNinja) opened Aug 31, 2026Contributor·

  ·
  4

• Isolate mutable token acquisition request options

  #4013·Ignacio Inglese (iNinja) opened Aug 31, 2026Contributor·

  ·
  4

• DevEx - Add documentation for bearer-over-mTLS user flows

  #3997·Gladwin Johnson VR (gladjohn) opened Aug 6, 2026Contributor·

  ·
  17

• Fix #3895: BlazorAuthenticationChallengeHandler sends a local returnUrl instead of the absolute NavigationManager.Uri

  #3995·Devon (DevonEast) opened Aug 5, 2026·

  ·
  1

  1

• Bump postcss from 8.5.15 to 8.5.26 in /tests/DevApps/SidecarAdapter/typescript

  dependenciesjavascript
  #3993·dependabot[bot] opened Aug 2, 2026Bot·

  ·
  2

• Source home account identifier (uid/utid) claims from the redeemed token

  #3991·Tanuj Sood (soodt) opened Jul 31, 2026Contributor·3 of 4 tasks·

  ·
  4

• [do not merge] deliberate break to test cg feature on all SDKs

  #3987·Gladwin Johnson VR (gladjohn) opened Jul 29, 2026Contributor·

  ·

• Fix token cache builder return XML documentation

  #3952·edbenson opened Jul 15, 2026·2 of 4 tasks·

  ·

• Redeem authorization code with MSAL when complex client credentials are configured (#3631)

  #3925·Armin Azar (armin-azar) opened Jul 4, 2026Contributor·4 tasks done·

  ·
  1

  1

• Reapply "Throw on Authority vs Instance/TenantId conflict (#3873)"

  #3890·Iarek Kovtunenko (iarekk) opened Jun 23, 2026Contributor·

  ·

• Fix losing certificates for credentials with CredentialSource.Certificate

  #3711·Pent Ploompuu (pentp) opened Feb 5, 2026·

  ·
  3

• Document HttpClient configuration for IDownstreamApi

  #3690·jmprieur with CopilotAI opened Jan 30, 2026·

  ·
  1

  2

  

• Adopt .NET configuration binding source generators for net8.0/net9.0 (AOT compatibility)

  #3582·jmprieur with CopilotAI opened Oct 29, 2025·8 tasks done·

  ·
  1

  3

  

• [POC] Use secure HTTP client factory and force certificate credential for token binding

  #3559·Ievgen Polyvanyi (cpp11nullptr) opened Oct 16, 2025Contributor·

  ·
  5

• Extract shared WWW-Authenticate challenge handling as internal helper

  needs attention
  #3545·jmprieur with CopilotAI opened Oct 10, 2025·

  ·
  1

  6

  

• Use MemoryCache instead of static cache in MSAL

  needs attention
  #3543·Bogdan Gavril (bgavrilMS) opened Oct 10, 2025Member·

  ·
  1

  8

• Improve error message for unconfigured MicrosoftIdentityApplicationOptions

  #3499·jennyf19 with CopilotAI opened Sep 26, 2025·

  ·
  1

  

• feat: Make DownstreamApi public to allow easy mocking in tests

  #3302·Meir Blachman (Meir017) opened Mar 17, 2025·

  ·
  1

  5