Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Microsoft Graph SDK should make the content of the WWW-Authenticate header available in the request context to support Pop with server nonce. #466

Open
1 task
jmprieur opened this issue Jul 28, 2022 · 0 comments
Labels
Kiota Is solved by Kiota or will be addressed in Kiota Request: enhancement New feature or request
Milestone

Comments

@jmprieur
Copy link

Please provide the following (and please check them off the list with [x]) before submitting this issue:

  • [ x ] Expected behavior. Please provide links to the specific Microsoft Graph documentation you used to determine the expected behavior.
  • [ x ] Actual behavior. Provide error codes, stack information, and a Fiddler capture of the request and response (please remove personally identifiable information before posting).
  • Steps to reproduce the behavior. Include your code, IDE versions, client library versions, and any other information that might be helpful to understand your scenario.

As tenant admins will enable Pop with server nonce for Microsoft Graph, the Clients will need to parse the WWW-Authenticate header to retrieve the Nonce and other parameters.

Actual behavior

Today, the WWW-Authenticate header is parsed by the AuthenticationHandler to provide the claims in the CaeAuthenticationProviderOption for the implementations of IAuthenticationProvider to support CAE.

Expected behavior

For Pop, the claims won't be enough. We need to provide the whole content of the WWW-Authenticate header (assuming Microsoft graph retuns only one WWW-Authenticate header), so that MSAL, or the classes that will provide the authentication can parse it and provide the authorization header (for instance Pop)

Steps to reproduce the behavior

@ghost ghost added the ToTriage label Jul 28, 2022
@andrueastman andrueastman added Request: enhancement New feature or request and removed ToTriage labels Aug 3, 2022
@MIchaelMainer MIchaelMainer added the Kiota Is solved by Kiota or will be addressed in Kiota label Aug 4, 2022
@maisarissi maisarissi added this to the Post v3 GA milestone Aug 18, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Kiota Is solved by Kiota or will be addressed in Kiota Request: enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

4 participants