Azure / Azure/azure-sdk-for-cpp
Support token cache persistence in client assertion workflow
- Dominant language
- C++
- Stars
- 205
- Forks
- 172
- Avg merge
- 1d 3h
- Merged PRs (30d)
- 37
Description
**Description of Ask:**
To have `ClientAssertionCredentialOptions` implement `ISupportsTokenCachePersistenceOptions`. As a consumer of Identity, Azure PowerShell is dependent on the Azure Identity library for .NET. Now the client assertion workflow has increasing usage, so the ask should have higher priority.
**Business Impact:**
In the client assertion auth flow, Azure PowerShell customers acquire the access token with the federated token. The access token must be used by the subsequent Azure PowerShell cmdlets. We depend on Azure.Identity to save the tokens to the MSAL cache. As the federated token has a short lifetime, it's impossible to cache the federated token and reauthenticate every time a cmdlet is run.
.NET reference implementation - https://github.com/Azure/azure-sdk-for-net/pull/43633
Moved from https://github.com/Azure/azure-sdk-for-cpp-pr/issues/26
cc @scottaddie
Contributor guide
Assessment
This issue has not been assessed yet.