microsoft-authentication-library-for-java
microsoft-authentication-library-for-java copied to clipboard
[Bug] MSAL should use the recommended padding in client_credentials
Library version used
latest
Java version
8
Scenario
ConfidentialClient - service to service (AcquireTokenForClient)
Is this a new or an existing app?
This is a new app or experiment
Issue description and reproduction steps
The recommended padding is PSS, as per docs https://learn.microsoft.com/en-us/entra/identity-platform/certificate-credentials#header
MSAL Java use RSS - https://github.com/AzureAD/microsoft-authentication-library-for-java/blob/b02c8f2fcd532b762f4d21f45d7e3f6984909b2d/msal4j-sdk/src/main/java/com/microsoft/aad/msal4j/JwtHelper.java#L49
Relevant code snippets
Expected behavior
No response
Identity provider
Microsoft Entra ID (Work and School accounts and Personal Microsoft accounts)
Regression
No response
Solution and workarounds
No response