Add Service Fabric token revocation support

[gladjohn]

Fixes #5420

Changes proposed in this request
This pull request introduces support for claims and revoked token handling in Managed Identity authentication, along with improvements to token caching logic and query parameter parsing. The main changes include new properties for claims and revoked token hash, enhanced cache bypass logic to handle claims and force refresh, and the ability to pass client capabilities and revoked token hashes to Managed Identity endpoints. Additionally, the parsing of key-value query strings is made more robust to handle edge cases.

Managed Identity Claims and Revoked Token Support

• Added Claims and RevokedTokenHash properties to AcquireTokenForManagedIdentityParameters, and updated logging to reflect their usage. [1] [2]
• Implemented logic in ManagedIdentityAuthRequest to bypass cache when claims are present, compute hash of revoked tokens, and pass this information to the endpoint, ensuring correct token issuance in claims-based scenarios. [1] [2] [3] [4]

Client Capabilities and Claims Integration

• Added method to ManagedIdentityRequest to include client capabilities (xms_cc) and revoked token hash (token_sha256_to_refresh) in requests; integrated this in AbstractManagedIdentity for sources that support claims and capabilities. [1] [2]
• Introduced ManagedIdentitySourceExtensions to track which Managed Identity sources support claims and capabilities.

Key-Value Query String Parsing Improvements

• Improved CoreHelpers.ParseKeyValueList to correctly handle values containing =, such as base64-encoded strings, by splitting only on the first = character. Also enhanced trimming and logging. [1] [2]

Test and Dependency Updates

• Updated test helpers to use TestConstants.ATSecret for access tokens and added flags for capability and claims support in mock handlers. [1] [2] [3]

Dependency Injection and Usability

• Passed ICryptographyManager via ManagedIdentityAuthRequest constructor for hash computation, and updated dependencies in Managed Identity source files. [1] [2] [3] [4] [5] [6]

Testing

• unit testing
• manual testing in service fabric cluster

Performance impact
none

Documentation

• All relevant documentation is updated.