microsoft-identity-web icon indicating copy to clipboard operation
microsoft-identity-web copied to clipboard

[Feature Request] Per-tenant encryption for distributed token cache

Open yohanb opened this issue 3 years ago • 0 comments

Is your feature request related to a problem? Please describe. The current token cache encryption strategy uses the same key to encrypt and decrypt all tokens in the cache. This doesn't provide isolation in a multi-tenant scenario.

Describe the solution you'd like Allow a different encrypt key for each tenant ID which tried to acquire a token from the cache.

Describe alternatives you've considered Alternatives right now would require a lot of custom implementations and drift from the provided code in Microsoft Identity Web.

yohanb avatar Feb 21 '22 22:02 yohanb