azure-sdk-for-cpp icon indicating copy to clipboard operation
azure-sdk-for-cpp copied to clipboard

Support token cache persistence in client assertion workflow

Open ahsonkhan opened this issue 4 months ago • 1 comments

Description of Ask: To have ClientAssertionCredentialOptions implement ISupportsTokenCachePersistenceOptions. As a consumer of Identity, Azure PowerShell is dependent on the Azure Identity library for .NET. Now the client assertion workflow has increasing usage, so the ask should have higher priority.

Business Impact: In the client assertion auth flow, Azure PowerShell customers acquire the access token with the federated token. The access token must be used by the subsequent Azure PowerShell cmdlets. We depend on Azure.Identity to save the tokens to the MSAL cache. As the federated token has a short lifetime, it's impossible to cache the federated token and reauthenticate every time a cmdlet is run.

.NET reference implementation - https://github.com/Azure/azure-sdk-for-net/pull/43633

Moved from https://github.com/Azure/azure-sdk-for-cpp-pr/issues/26

cc @scottaddie

ahsonkhan avatar Sep 30 '24 18:09 ahsonkhan