microsoft-identity-web
microsoft-identity-web copied to clipboard
[Feature Request] Per-tenant encryption for distributed token cache
Is your feature request related to a problem? Please describe. The current token cache encryption strategy uses the same key to encrypt and decrypt all tokens in the cache. This doesn't provide isolation in a multi-tenant scenario.
Describe the solution you'd like Allow a different encrypt key for each tenant ID which tried to acquire a token from the cache.
Describe alternatives you've considered Alternatives right now would require a lot of custom implementations and drift from the provided code in Microsoft Identity Web.