microsoft-authentication-library-for-java icon indicating copy to clipboard operation
microsoft-authentication-library-for-java copied to clipboard

[Bug] MSAL should use the recommended padding in client_credentials

Open bgavrilMS opened this issue 6 months ago • 0 comments

Library version used

latest

Java version

8

Scenario

ConfidentialClient - service to service (AcquireTokenForClient)

Is this a new or an existing app?

This is a new app or experiment

Issue description and reproduction steps

The recommended padding is PSS, as per docs https://learn.microsoft.com/en-us/entra/identity-platform/certificate-credentials#header

MSAL Java use RSS - https://github.com/AzureAD/microsoft-authentication-library-for-java/blob/b02c8f2fcd532b762f4d21f45d7e3f6984909b2d/msal4j-sdk/src/main/java/com/microsoft/aad/msal4j/JwtHelper.java#L49

Relevant code snippets


Expected behavior

No response

Identity provider

Microsoft Entra ID (Work and School accounts and Personal Microsoft accounts)

Regression

No response

Solution and workarounds

No response

bgavrilMS avatar May 23 '25 21:05 bgavrilMS