2.13.4
- Update to IdentityModel 7.0.0-preview5 on .NET 8 and IdentityModel 6.32.3 for the other target frameworks.
- Update to MSAL 4.56.0, which now
enables the cache synchronization by default - Support for .NET 8 preview 7. See PR #2430
Bug fixes
- In Microsoft.Identity.Web.Owin, removed un-needed reference to Microsoft.Aspnet.WebApi.HelpPage. See issue #2417
- Fix to accomodate for breaking change in ASP.NET Core on .NET 8 that the SecurityToken is now a JsonWebToken. See issue #2420
- Improved the usability of IDownstreamApi by checking all
HttpResponse
for success before returning to the caller, instead of swallowing issues. This is a change of behavior. See issue #2426 - Improvement/Fix of OWIN scenarios, especially the session with B2C: #2388
- Fix an issue with CIAM web APIs and added two CIAM test apps. See PR #2411
- Fix a bug that is now surfaced by the .NET 8 runtime. See issue #2448
- Added a lock while loading credentials. See issue #2439
Fundamentals
- performance improvements: #2414
- Replaced Selenim with Playwright for more reliable faster UI tests. See issue #2354
- Added MSAL telemetry about the kind of token cache used (L1/L2). See issue #1900
- Resilience improvement: IdWeb now attempts to reload a certificate from its description when AAD returns "certificate revoked" error. See issue #244