[Feature Request] Support certificates in a Windows certificate store

[johnstairs]

Is your feature request related to a problem? Please describe. We need to acquire OAuth tokens using a certificate that is in a Windows certificate store. The private key is non-exportable and so we can't hand the private key directly to MSAL.

Describe the solution you'd like It should be possible to look up a certificate in a certificate store by subject name, thumbprint, etc. and then use it as a credential for a confidential client.

Describe alternatives you've considered I'm working though using the Windows crypto API and implementing my own AssertionCallback, but it's not pretty :).

[bgavrilMS]

We recommend using Managed Identity of Federated Idenitity instead of certificates.

[johnstairs]

@bgavrilMS, understood, but this is an on-prem scenario where Managed Identity and federated identities are not options.