From c2ee714587885b2a6a349eca00c8d4e2659e540d Mon Sep 17 00:00:00 2001 From: jennyf19 Date: Fri, 2 Feb 2024 20:52:28 -0800 Subject: [PATCH 1/2] update id web to 7.3.1 (#2665) --- Directory.Build.props | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Directory.Build.props b/Directory.Build.props index 7302a201e..9f0d3dda8 100644 --- a/Directory.Build.props +++ b/Directory.Build.props @@ -76,7 +76,7 @@ - 7.3.0 + 7.3.1 4.59.0 3.3.0 4.7.2 From 397fce764ad436a68934baa545f2b8884e70ae8c Mon Sep 17 00:00:00 2001 From: Jean-Marc Prieur Date: Mon, 5 Feb 2024 10:09:35 -0800 Subject: [PATCH 2/2] Changelog for IdWeb 2.17.0 (#2668) * Changelog for IdWeb 2.17.0 Co-authored-by: jennyf19 --- changelog.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/changelog.md b/changelog.md index ce481363b..8a2e81b19 100644 --- a/changelog.md +++ b/changelog.md @@ -1,3 +1,20 @@ +2.17.0 +========= +- Updated to Microsoft.IdentityModel.* 7.3.1 and MSAL.NET 4.59.0 + +### New features +- Added support for Microsoft.NET.Sdk.Worker. See [Worker calling APIs](https://github.com/AzureAD/microsoft-identity-web/wiki/worker%E2%80%90app%E2%80%90calling%E2%80%90downstream%E2%80%90apis) +- Added support for Managed identity when calling a downstream API on behalf of the app. See [Calling APIs with Managed Identity](https://github.com/AzureAD/microsoft-identity-web/wiki/calling-apis-with-managed-identity) and [PR 2650](https://github.com/AzureAD/microsoft-identity-web/pull/2650). For details see [PR #2645](https://github.com/AzureAD/microsoft-identity-web/issues/2645) + +### Bug fixes +- In OWIN applications, GetTokenForUserAsync now respects the ClaimsPrincipal. See issue [#2629](https://github.com/AzureAD/microsoft-identity-web/issues/2629) for details. +- After setting `AddTokenAcquisition(useSingleton:true)` to use token acquisition as a singleton, if you use `.AddMicrosoftGraph` and/or `.AddDownstreamApi` after this call, + the GraphServiceClient and IDownstreamApis are now registered as a singleton service. For details see [PR #2645](https://github.com/AzureAD/microsoft-identity-web/issues/2645) +- Added check Against Injection Attacks. For details see [PR 2619](https://github.com/AzureAD/microsoft-identity-web/issues/2619) + +### Engineering excellence +- Added a benchmark running on PR merges, available from [https://azuread.github.io/microsoft-identity-web/benchmarks](https://azuread.github.io/microsoft-identity-web/benchmarks) on GitHub pages + 2.16.1 ========= - Update Microsoft.Identity.Abstractions 5.1.0 and Microsoft.IdentityModel.* 7.1.2