Bogdan Gavril

[Feature Request- Breaking change] Use an actual MemoryCache with eviction when instructed

2

Today, Id.Web configures MSAL to use `SharedMemoryCache` - a static cache. This is fast, but no eviction. With the introduction of new concepts like FMI, which increase the number of...

It is possible to connect to KeyVault and getting a cert for the Lab, without deploying a secret. Use Workload Identity Federation - see https://learn.microsoft.com/en-us/azure/developer/github/connect-from-azure?tabs=azure-portal%2Cwindows Many MSAL libraries do this,...

[Feature Request] Decouple MsalDistributedTokenCacheAdapter from IServiceProvider

1

**Is your feature request related to a problem? Please describe.** `MsalDistributedTokenCacheAdapter` is tied to `IServiceProvider` only to pull `IDataProtectionProvider` for encryption purposes. This makes the token cache awkward to adopt...

Id.Web should not use DefaultAzureCredential in production code

3

### Description As per https://learn.microsoft.com/en-us/dotnet/azure/sdk/authentication/best-practices?tabs=aspdotnet#use-deterministic-credentials-in-production-environments, `DefaultAzureCredential` (`DAC`) should not be used in production scenarios. This is based on a PIR. Please read the public doc for to see the scenario...

[Feature Request] Replace the memory cache and distributed cache implementation with .NET9's Hybrid Cache

2

[**Is your feature request related to a problem? Please describe.** .NET team provides a new library called HybridCache, which by default uses MemoryCache, but can optionally also be configured with...

- [ ] Cache extensibility support, [spec](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/blob/main/docs/cache_extensibility.md). - [ ] Support for FMI path - [ ] Support for attributes (not attribute tokens)

### Library version used latest ### Java version 8 ### Scenario ConfidentialClient - service to service (AcquireTokenForClient) ### Is this a new or an existing app? This is a new...

### MSAL client type Managed identity, Confidential, Public ### Problem statement Update mstest to version 4. If you encounter ExpectedException, use Assert.Expect helpers on a small block of code, not...

Fix for #5375 - Add a FormatResultAsync to IAuthenticationOperation

2

Fixes #5375 Create an `IAuthenticationOperation2` interface with the new method.

### MSAL client type Confidential ### Problem statement ### MSAL In order to enforce the managed certificate credential, the following states should be covered: 1. old MSAL, old cert ->...