GitHub / AzureAD/microsoft-authentication-library-for-python / commits
Microsoft Authentication Library (MSAL) for Python makes it easy to authenticate to Microsoft Entra ID. General docs are available here https://learn.microsoft.com/entra/msal/python/ Stable APIs are documented here https://msal-python.readthedocs.io. Questions can be asked on www.stackoverflow.com with tag "msal" + "python".
| SHA | Message | Author | Date | Stats |
|---|---|---|---|---|
| 1416438a |
Fix _is_inside_docker() false positive on systemd cgroups v2 hosts (#945)
Co-authored-by: Copilot App <2****t@u****m> |
Nilesh Choudhary <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
2 days ago | |
| b5bf1539 | Avdunn/pipeline fix (#954) |
Avery-Dunn <6****n@u****m>
Committed by: GitHub <n****y@g****m> |
6 days ago | |
| f3b6792a | Add WindowsContainerImage definition (#953) |
Avery-Dunn <6****n@u****m>
Committed by: GitHub <n****y@g****m> |
6 days ago | |
| 9ddae0d1 |
fix(security): pin Service Fabric managed identity TLS (#952)
Co-authored-by: Copilot App <2****t@u****m>, Copilot App <2****t@u****m>, Copilot App <2****t@u****m> |
Nilesh Choudhary <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
7 days ago | |
| cd696566 | Harden regional authority validation (#951) |
Nilesh Choudhary <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
15 days ago | |
| 711d8a68 |
Allow Azure Arc managed identity requests to forward user-assigned identity s...
Co-authored-by: Copilot App <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, copilot-swe-agent[bot] <1****t@u****m>, Nilesh Choudhary <n****y@m****m>, avdunn <a****n@m****m>, Gladwin Johnson <9****n@u****m>, Copilot <2****t@u****m> |
Copilot <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
16 days ago | |
| 43ed3a84 | Fix cache key hash collision: length-prefix extended cache key components (#946) |
Nilesh Choudhary <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
21 days ago | |
| 9a207a95 |
Add managed identity E2E tests + self-hosted CI stages (MSAL Go #641 parity) ...
Co-authored-by: Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m> |
Gladwin Johnson <9****n@u****m>
Committed by: GitHub <n****y@g****m> |
23 days ago | |
| b299e3b2 |
Deprecate decode_id_token and stop validating ID tokens (#911) (#943)
Co-authored-by: Copilot App <2****t@u****m>, Copilot App <2****t@u****m>, Copilot App <2****t@u****m> |
Nilesh Choudhary <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| d81a29ac | Add forwarded_client_claims support to confidential client flows (#937) |
Robbie-Microsoft <8****t@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| b37d7dc7 |
Add test coverage for past expires_on in Managed Identity (#940)
Co-authored-by: Copilot <2****t@u****m>, Copilot Autofix powered by AI <1****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot Autofix powered by AI <1****t@u****m> |
Gladwin Johnson <9****n@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 8ca3c3a0 |
Remove redundant GitHub Actions unit-test job (#942)
Co-authored-by: copilot-swe-agent[bot] <1****t@u****m> |
Copilot <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 55dd09fb | Migrate region discovery to IMDS /compute JSON endpoint (#929) |
Robbie-Microsoft <8****t@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 62a80479 | Remove pytest-azurepipelines plugin to fix Python 3.14 stall (#936) |
Ryan Auld <r****d@m****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| bfd7fb78 | Fix Python 3.14 test timeout: replace utcnow() and remove tee pipe (#934) |
Ryan Auld <r****d@m****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 422f9e57 |
Validate region string format before use in URL construction (#921)
Co-authored-by: Copilot <2****t@u****m> |
Bogdan Gavril <b****l@m****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 2cbafafe |
Fix benchmark cache path and add forceBenchmarks pipeline variable (#927)
Co-authored-by: Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m> |
Ryan Auld <r****d@m****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 836abbd9 |
Add OneBranch pipeline templates for CI and Release (#925)
Co-authored-by: Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m> |
Ryan Auld <r****d@m****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 6b652f4f |
Fix ESRP client ID typo in release pipeline (38d4 -> 384d) (#924)
Co-authored-by: Copilot <2****t@u****m> |
Ryan Auld <r****d@m****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| ebb980f1 | Update version to 1.37.0 (#922) |
Avery-Dunn <6****n@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| c504b419 |
Migrate CI/CD from GitHub Actions to ADO; remove GH Actions workflow (#895)
Co-authored-by: Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, Nilesh Choudhary <n****y@m****m> |
Ryan Auld <r****d@m****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| 192a82dc | Removed support for Python 3.8 (#910) |
Nilesh Choudhary <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| 08aa7fd2 | Add User Federated Identity Credential (user_fic) grant type support (#918) |
Avery-Dunn <6****n@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| d4f58ec7 | Add documentation for MSI v2 mTLS in Python (#904) |
Gladwin Johnson <9****n@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| 5866feb9 | Create design document for MSI v2 In-Memory Key Approach (#905) |
Gladwin Johnson <9****n@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| 651d54b8 |
Update pymsalruntime minimum version to 0.20.6 (#919)
Co-authored-by: Copilot <2****t@u****m> |
fengga <6****a@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| 895b5817 | Use unsigned redirect uri for mac broker flows (#907) |
fengga <6****a@u****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 8ea1eaaa |
Switch FMI tests from disabled IDLABS_APP_FMI to MISE-App-FMICLIENT (#913)
Co-authored-by: Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m>, Copilot <2****t@u****m> |
Ryan Auld <r****d@m****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| faf5dce2 |
Bump cryptography dependency ceiling to <50 (N+3) (#906)
Co-authored-by: gladjohn <9****n@u****m>, copilot-swe-agent[bot] <1****t@u****m>, gladjohn <9****n@u****m> |
Copilot <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 016092ef |
Forward MSAL client metadata headers through IMDS to ESTS (#902)
Co-authored-by: gladjohn <9****n@u****m>, copilot-swe-agent[bot] <1****t@u****m>, gladjohn <9****n@u****m> |
Copilot <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 67136fe2 | Escape username parameter (#901) |
Dharshan BJ <d****b@m****m>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| a3ba7226 | Fix OIDC issuer domain spoofing in B2C host validation (#896) |
Nilesh Choudhary <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| 6a92f249 |
Use cryptographically secure randomness for PKCE, state, and nonce generation...
Co-authored-by: Copilot <1****t@u****m>, Copilot <1****t@u****m>, Copilot <1****t@u****m>, ashok672 <8****2@u****m>, Copilot <1****t@u****m>, copilot-swe-agent[bot] <1****t@u****m> |
Ashok Kumar Ramakrishnan <8****2@u****m>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| ecf515a5 |
Added withFmi method for cca app (#876)
Co-authored-by: Bogdan Gavril <b****l@m****m>, Bogdan Gavril <b****l@m****m> |
Nilesh Choudhary <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| eb780683 |
Potential fix for code scanning alert no. 74: Workflow does not contain permi...
Co-authored-by: Copilot Autofix powered by AI <6****]@u****m> |
Avery-Dunn <6****n@u****m>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| 6de712ed |
Add documentation for Managed Identity v2 Hackathon (#885)
Co-authored-by: Copilot <1****t@u****m>, Copilot <1****t@u****m>, Copilot <1****t@u****m> |
Gladwin Johnson <9****n@u****m>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| 1f71ede3 | Add ADO CI, SDL, and release pipelines with e2e test enablement (#890) |
Ryan Auld <r****d@m****m>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| e4e692c5 |
Fix the PoP flow in the console app (#887)
Co-authored-by: Copilot Autofix powered by AI <1****t@u****m>, Petar Dimov <p****d@n****m>, Copilot Autofix powered by AI <1****t@u****m> |
PetarSDimov <p****v@g****m>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| 2de45aeb |
Instance discovery remains cloud local on known clouds (#875)
Co-authored-by: Feng Gao <f****a@m****m> |
Bogdan Gavril <b****l@m****m>
Committed by: GitHub <n****y@g****m> |
6 months ago | |
| 09c8821c | Create RELEASE_GUIDE.md (#880) |
Nilesh Choudhary <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
6 months ago | |
| 1310faca | Removed logs that were causing Alerts (#878) |
Nilesh Choudhary <1****t@u****m>
Committed by: GitHub <n****y@g****m> |
6 months ago | |
| 733a83cc |
Security: Remove unsafe PowerShell fallback in WSL (#866)
Co-authored-by: Ashok Kumar Ramakrishnan <8****2@u****m> |
Rin <d****0@g****m>
Committed by: GitHub <n****y@g****m> |
6 months ago | |
| d7e0e113 |
Add OIDC issuer validation (#840)
Co-authored-by: Nilesh Choudhary <n****y@m****m> |
Avery-Dunn <6****n@u****m>
Committed by: GitHub <n****y@g****m> |
6 months ago | |
| 58cf0736 | Separate manual tests and remove unused settings from E2E (#874) |
Bogdan Gavril <b****l@m****m>
Committed by: GitHub <n****y@g****m> |
6 months ago | |
| c0963357 |
Remove usage of Lab API for integration test config (#870)
Co-authored-by: Copilot Autofix powered by AI <6****]@u****m>, Copilot Autofix powered by AI <6****]@u****m> |
Avery-Dunn <6****n@u****m>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| 60d34014 |
Add form_post response mode support for system browser authentication (#868)
Co-authored-by: Ray Luo <r****o@m****m> |
Ashok Kumar Ramakrishnan <8****2@u****m>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| eac15a91 | Suppress CodeQL warning (#867) |
Bogdan Gavril <b****l@m****m>
Committed by: GitHub <n****y@g****m> |
8 months ago | |
| f0dec594 | merge Merge pull request #835 from vi7us/vitcurda/20250624/cert-thumbprint-made-opt... |
Ray Luo <r****o@m****m>
Committed by: GitHub <n****y@g****m> |
10 months ago | |
| 2c50ec4a | Cleaner implementation and precise docs on SHA256 | Ray Luo <r****o@m****m> | 10 months ago | |
| 83c102f2 | Explicitly rejecting empty hostname | Ray Luo <r****o@m****m> | 10 months ago | |
| 59fa1958 | Update pymsalruntime version range to handle the latest 0.20.0 release |
Dharshan BJ <d****b@m****m>
Committed by: Ray Luo <r****a@g****m> |
11 months ago | |
| 02d8b4c7 | Support Python 3.14 | Ray Luo <r****o@m****m> | 11 months ago | |
| 14bcad3e | Remove the reliance on socket.getfqdn() | Ray Luo <r****o@m****m> | 11 months ago | |
| 562d72e2 |
ROPC deprecation (#855)
Co-authored-by: Bogdan Gavril <b****l@m****m>, Bogdan Gavril <b****l@m****m> |
Ugonna Akali <1****1@u****m>
Committed by: GitHub <n****y@g****m> |
11 months ago | |
| 2a138a5a | Demonstrates the behavior of mismatching scope |
Ray Luo <r****o@m****m>
Committed by: Ray Luo <r****a@g****m> |
11 months ago | |
| f803aec3 | Release 1.34.0 (#853) |
Ray Luo <r****o@m****m>
Committed by: GitHub <n****y@g****m> |
11 months ago | |
| 2337a69a |
Bump pypa/gh-action-pypi-publish in /.github/workflows (#849)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
12 months ago | |
| cff139e0 | Set Redirect Uri for broker silent flow on Linux platform (#846) |
xinyuxu1026 <9****6@u****m>
Committed by: GitHub <n****y@g****m> |
12 months ago | |
| bebbdd4b | ADFS labs were decommissioned since late July 2025 | Ray Luo <r****o@m****m> | about 1 year ago | |
| 923a7321 | MSAL Python 1.33.0 (#841) |
Ray Luo <r****o@m****m>
Committed by: GitHub <n****y@g****m> |
about 1 year ago | |
| 70fd4d15 |
Add claims challenge parameter in initiate_device_flow (#839)
Co-authored-by: Ray Luo <r****o@m****m>, Ray Luo <r****o@m****m>, Ray Luo <r****o@m****m>, Ray Luo <r****o@m****m> |
Ashok Kumar Ramakrishnan <8****2@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 year ago | |
| bbeb4948 | certificate made optionall |
Vit Curda <v****a@m****t>
Committed by: Ray Luo <r****o@m****m> |
about 1 year ago | |
| 85c0f06a | Consolidate 6 boxes into 4 | Ray Luo <r****o@m****m> | about 1 year ago | |
| d3464e6c | Explicitly remove issuer from the OIDC discovery | Ray Luo <r****o@m****m> | about 1 year ago | |
| b3d4a041 | Document how to use sha256 for client credential | Ray Luo <r****o@m****m> | about 1 year ago | |
| b1d8cd71 | Use lowercase environment value during searching | Ray Luo <r****o@m****m> | about 1 year ago | |
| d49296c1 | Bump version number (#827) |
Ray Luo <r****o@m****m>
Committed by: GitHub <n****y@g****m> |
about 1 year ago | |
| 4c632c82 | Linux broker needs a specific redirect_uri | Ray Luo <r****o@m****m> | over 1 year ago | |
| db1c3848 | Cryptography shipped a new version during weekend | Ray Luo <r****o@m****m> | over 1 year ago | |
| 37d9af53 | merge Merge pull request #816 from AzureAD/release-1.32.3 |
Ray Luo <r****o@m****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| deb61fa1 | Improve test cases to test header-less response | Ray Luo <r****o@m****m> | over 1 year ago | |
| db889c7d | Remind developers about http_cache's unstable format | Ray Luo <r****o@m****m> | over 1 year ago | |
| 62855d4a | Properly throw MsalServiceError exception | Ray Luo <r****o@m****m> | over 1 year ago | |
| 5a1a0ff6 | Add dependency management suggestions | Ray Luo <r****o@m****m> | over 1 year ago | |
| e60467c2 | MSAL 1.32.2 | Ray Luo <r****o@m****m> | over 1 year ago | |
| dd4fe699 | MSAL Python 1.32.3 | Ray Luo <r****o@m****m> | over 1 year ago | |
| 3c87ba93 | Allow more http response headers | Ray Luo <r****o@m****m> | over 1 year ago | |
| 04b5245c | Tolerate an http response object with no headers | Ray Luo <r****o@m****m> | over 1 year ago | |
| 9156a30f | MSAL Python 1.32.1 | Ray Luo <r****o@m****m> | over 1 year ago | |
| 2c3cd281 | Improve IndividualCache test cases | Ray Luo <r****o@m****m> | over 1 year ago | |
| 29d1ac15 | Only cache desirable data in http cache | Ray Luo <r****o@m****m> | over 1 year ago | |
| 1321e379 |
Fix username/password validation in broker test (#807)
Co-authored-by: Ray Luo <r****a@g****m>, Ray Luo <r****a@g****m> Signed-off-by: Emmanuel Ferdman <e****n@g****m>, Emmanuel Ferdman <e****n@g****m> |
Emmanuel Ferdman <e****n@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 4eb7bd10 |
Enable broker support on Linux for WSL (#766)
Co-authored-by: Ray Luo <r****o@m****m>, Ray Luo <r****o@m****m>, Ray Luo <r****o@m****m>, Ray Luo <r****o@m****m>, Ray Luo <r****o@m****m>, Ray Luo <r****o@m****m>, Ray Luo <r****o@m****m>, Ray Luo <r****o@m****m>, Ray Luo <r****o@m****m>, Ray Luo <r****o@m****m> |
Dharshan BJ <d****b@m****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| bcc54a99 | merge Merge pull request #805 from pvaneck/update-deprecated-api |
Ray Luo <r****o@m****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 45e39669 |
Update deprecated TokenCache API usage
Signed-off-by: Paul Van Eck <p****k@m****m> |
Paul Van Eck <p****k@m****m>
Committed by: Ray Luo <r****o@m****m> |
over 1 year ago | |
| 30dce4ec | Swallow exception during optional check | Ray Luo <r****o@m****m> | over 1 year ago | |
| fb3e21cf | ADFSv2 and ADFSv3 labs are decommissioned | Ray Luo <r****o@m****m> | over 1 year ago | |
| 689e8624 | Support pod identity | Ray Luo <r****o@m****m> | over 1 year ago | |
| 2f9747fa | ManagedIdentityClient sends xms_cc and token_sha256_to_refresh to SF | Ray Luo <r****o@m****m> | over 1 year ago | |
| 4d168cfd | We have long been switched to use Github actions | Ray Luo <r****o@m****m> | over 1 year ago | |
| 4e2a4ec0 | Specify verify=True to hopefully satisfy CodeQL | Ray Luo <r****o@m****m> | over 1 year ago | |
| 0340f5e7 | Enable Issue-Sentinel to scan for similar issues (#790) |
Dharshan BJ <d****b@m****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| a37d3a32 | Pass Sku and Ver to MsalRuntime (#786) |
Ugonna Akali <1****1@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| b92b4f18 | Bumping version number to 1.32.0 | Ray Luo <r****o@m****m> | over 1 year ago | |
| 04e740e3 | merge Merge branch 'release-1.31.2' into merge | Ray Luo <r****o@m****m> | over 1 year ago | |
| bf27fc6d | MSAL Python 1.31.2b1 | Ray Luo <r****o@m****m> | over 1 year ago | |
| f27f4b22 | Supports GUID/scope and https://contoso.com//scope | Ray Luo <r****o@m****m> | over 1 year ago | |
| 6508d992 | Try to suppress another verify=False | Ray Luo <r****o@m****m> | over 1 year ago | |
| 3803ae22 | Suppress a false positive CodeQL alarm | Ray Luo <r****o@m****m> | over 1 year ago | |
| 388b86d3 | Pin ubuntu 22.04 so that we can still test on Py37 | Ray Luo <r****o@m****m> | over 1 year ago |