Azure / Azure/azure-sdk-for-cpp

Support token cache persistence in client assertion workflow

Open
#6,049 1 comment 0 reactions 0 assignees View on GitHub
Azure.Identity
Dominant language
C++
Stars
205
Forks
172
Avg merge
1d 3h
Merged PRs (30d)
37

Description

**Description of Ask:**
To have `ClientAssertionCredentialOptions` implement `ISupportsTokenCachePersistenceOptions`. As a consumer of Identity, Azure PowerShell is dependent on the Azure Identity library for .NET. Now the client assertion workflow has increasing usage, so the ask should have higher priority.

**Business Impact:**
In the client assertion auth flow, Azure PowerShell customers acquire the access token with the federated token. The access token must be used by the subsequent Azure PowerShell cmdlets. We depend on Azure.Identity to save the tokens to the MSAL cache. As the federated token has a short lifetime, it's impossible to cache the federated token and reauthenticate every time a cmdlet is run.

.NET reference implementation - https://github.com/Azure/azure-sdk-for-net/pull/43633

Moved from https://github.com/Azure/azure-sdk-for-cpp-pr/issues/26

cc @scottaddie

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.