oauth2 icon indicating copy to clipboard operation
oauth2 copied to clipboard

Support client_credentials flow with Microsoft Identity Platform v2.0 using client assertions

Open manicminer opened this issue 4 years ago • 2 comments

  • Commonly referred to as Client Certificate authentication
  • I'm not sure if this follows a particular standard, but it's similar to client_credentials flow but signing a JWT for identity instead of sending a shared secret
  • Azure AD is the only place I've seen this, so I guess belongs in the microsoft package? Unless there's a standard implementation I missed.

Example/proposal in #464

Documentation

  • https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow#second-case-access-token-request-with-a-certificate
  • https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-certificate-credentials

manicminer avatar Dec 15 '20 09:12 manicminer

I would find this very valuable. @codyoss, are you the current maintainer of this package? The pull request here seems quite reasonable.

deltamualpha avatar Aug 22 '22 21:08 deltamualpha

@deltamualpha If you're looking for a maintained implementation of this, I have a package github.com/manicminer/hamilton/auth supporting the various Azure AD authentication methods.

manicminer avatar Aug 23 '22 00:08 manicminer