azure-sdk-for-net icon indicating copy to clipboard operation
azure-sdk-for-net copied to clipboard

[Key Vault] Add CAE support

Open JonathanCrd opened this issue 1 year ago • 2 comments

Resolves: https://github.com/Azure/azure-sdk-for-net-pr/issues/2132, based on https://github.com/Azure/azure-sdk-for-java/pull/41814.

This PR introduces support for Continuous Access Evaluation (CAE) by updating the ChallengeBasedAuthenticationPolicy class. CAE is always enabled.

JonathanCrd avatar Sep 17 '24 19:09 JonathanCrd

After an offline discussion with @chlowell, I realized that claims should not be cached. As a result:

  • ChallengeParameters does not need any additional properties.
  • The AuthorizeRequestInternal method, which relies on the cached challenge, will no longer pass the claims when instantiating a new TokenRequestContext.

JonathanCrd avatar Sep 17 '24 22:09 JonathanCrd

API change check

API changes are not detected in this pull request.

azure-sdk avatar Sep 17 '24 22:09 azure-sdk