AzureAD/microsoft-authentication-library-for-objc 2.18.1 on GitHub

Release Notes

Wait for the app to call signIn() before acquiring tokens after Native Auth V2 password-reset MFA verification, consistent with normal reset and strong-auth registration completion.
Expose Native Auth V2 non-password attribute validation failures through MSALNativeAuthFlowError.isInvalidAttributes, with affected attribute names in errorDescription.
Remove the unused experimental Native Auth V2 MSALNativeAuthAttributesInvalidState and MSALNativeAuthAttributesInvalidDelegate.
Fix Native Auth V2 authorize-challenge handling of InsufficientAuthorization responses carrying a continuation token and the requested flow entry link.
Remove password from MSALNativeAuthSignInParametersV2.
Remove isInvalidCredentials from MSALNativeAuthFlowError; incorrect passwords are reported through isInvalidPassword.
Add resendChallenge for MFAVerificationRequiredState and StrongAuthVerificationRequiredState
Require authentication-method selection when Native Auth V2 sign-up discovers an existing account with multiple email/password methods.
Remove password from the MSALNativeAuthSignUpParametersV2 API.
Send username on signUpStart for Native Auth V2
Scopes and Claims are now sent at the start of the Native Auth v2 flows
Add SMS and email just-in-time authentication method enrollment to Native Auth V2, preserving sign-in, sign-up, and password-reset continuations.
Update Native Auth V2 error handling to match the API contract

#3159: [patch] [engg]: Prepare MSAL 2.18.1 release
#3156: Fix Native Auth V2 SSPR MFA completion
#3152: Remove Native Auth V2 attributesInvalidState
#3154: [patch] [bugfix]: Fix Native Auth V2 authorize-challenge continuation handling
#3153: Merge main into dev
#3151: Remove password from sign-in parameters
#3143: Native Auth v2 add resendChallenge for MFA/JIT
#3142: Remove password from MSALNativeAuthSignUpParametersV2
#3146: [PATCH] [bugfix]: update Native Auth V2 error mapping and MFA routing
#3144: [patch] [engg]: Resolve MSAL 2.17.0 merge-back conflicts

See More

#3140: [patch] [engg]: Merge MSAL main back into dev after 2.17.0
#1985: Silent Token fetch not going to SSO Extension
#3141: Support existing-account sign-in during Native Auth V2 sign-up
#3139: Send username on sign-up start for Native Auth v2
#3138: Update Native Auth v2 scopes and claims propagation
#3137: [patch][tests]: Avoid duplicate B2C password selection during page transitions
#3135: [patch][tests]: Fix B2C provider selection render readiness race
#1984: Added privacy manifest
#3128: [minor] [feature]: Add SMS and email JIT enrollment to Native Auth V2

This list of changes was auto generated.