Cherry-pick PR #1552: ByPass RedirectUrlValidation for Native Edge Browser SSO flow to release/1.14.0
This PR creates a new branch release/1.14.0-with-pr1552 from the 1.14.0 release tag and cherry-picks the changes from PR #1552 to enable bypassing redirect URL validation for native Edge Browser SSO flows.
Background
PR #1552 was originally merged into the dev branch but was needed for the 1.14.0 release to unblock E2E testing of the native Browser SSO Extension flow on Edge using built-in native DOM APIs. The Broker expects apps to use the redirect URL format msauth.://auth, however MSALJS apps that trigger the native Browser Core SSO Extension flow do not need to follow this format, so redirect URL validation should be bypassed in these scenarios.
Changes Made
The following changes from PR #1552 have been successfully cherry-picked:
-
Added
bypassRedirectURIValidationproperty toMSIDRequestParameters.hwith comprehensive documentation explaining its usage -
Added corresponding property to
MSIDBrokerOperationTokenRequest.h -
Updated property assignment in
MSIDBrokerOperationTokenRequest.mto pass the flag through the request pipeline
Files Modified
-
IdentityCore/src/parameters/MSIDRequestParameters.h- Added property with documentation -
IdentityCore/src/broker_operation/request/token_request/MSIDBrokerOperationTokenRequest.h- Added property declaration -
IdentityCore/src/broker_operation/request/token_request/MSIDBrokerOperationTokenRequest.m- Added property assignment
Testing
- Basic compilation validation passed
- Cherry-pick applied cleanly without conflicts
- All original commit history and authorship preserved
This change maintains backward compatibility while enabling the necessary flexibility for Edge Browser SSO scenarios in the 1.14.0 release line.
✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.