draft

GladwinJohnson · GladwinJohnson · commit 544e8853ee32 · 2025-05-01T06:47:12.000-07:00
diff --git a/Microsoft.Identity.Web.sln b/Microsoft.Identity.Web.sln
@@ -164,6 +164,8 @@ Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Microsoft.Identity.Web.Oidc
 EndProject
 Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Microsoft.Identity.Web.UI.Test", "tests\Microsoft.Identity.Web.UI.Test\Microsoft.Identity.Web.UI.Test.csproj", "{CF31F33A-E5F5-DB57-4FEF-81BDAFD497C8}"
 EndProject
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "daemon-app-msi", "tests\DevApps\daemon-app\daemon-app-msi\daemon-app-msi.csproj", "{A8181404-23E0-D38B-454C-D16ECDB18B9F}"
+EndProject
 Global
 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
 		Debug|Any CPU = Debug|Any CPU
@@ -387,6 +389,10 @@ Global
 		{CF31F33A-E5F5-DB57-4FEF-81BDAFD497C8}.Debug|Any CPU.Build.0 = Debug|Any CPU
 		{CF31F33A-E5F5-DB57-4FEF-81BDAFD497C8}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{CF31F33A-E5F5-DB57-4FEF-81BDAFD497C8}.Release|Any CPU.Build.0 = Release|Any CPU
+		{A8181404-23E0-D38B-454C-D16ECDB18B9F}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{A8181404-23E0-D38B-454C-D16ECDB18B9F}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{A8181404-23E0-D38B-454C-D16ECDB18B9F}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{A8181404-23E0-D38B-454C-D16ECDB18B9F}.Release|Any CPU.Build.0 = Release|Any CPU
 	EndGlobalSection
 	GlobalSection(SolutionProperties) = preSolution
 		HideSolutionNode = FALSE
@@ -461,6 +467,7 @@ Global
 		{E927D215-A96C-626C-9A1A-CF99876FE7B4} = {45B20A78-91F8-4DD2-B9AD-F12D3A93536C}
 		{8DA7A2C6-00D4-4CF1-8145-448D7B7B4E5A} = {1DDE1AAC-5AE6-4725-94B6-A26C58D3423F}
 		{CF31F33A-E5F5-DB57-4FEF-81BDAFD497C8} = {B4E72F1C-603F-437C-AAA1-153A604CD34A}
+		{A8181404-23E0-D38B-454C-D16ECDB18B9F} = {E37CDBC1-18F6-4C06-A3EE-532C9106721F}
 	EndGlobalSection
 	GlobalSection(ExtensibilityGlobals) = postSolution
 		SolutionGuid = {104367F1-CE75-4F40-B32F-F14853973187}
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/ManagedIdentityTestHooks.cs b/src/Microsoft.Identity.Web.TokenAcquisition/ManagedIdentityTestHooks.cs
@@ -0,0 +1,19 @@
+﻿// Copyright (c) Microsoft Corporation. All rights reserved.
+// Licensed under the MIT License.
+
+using System.Net.Http;
+using Microsoft.Identity.Client;
+
+namespace Microsoft.Identity.Web
+{
+    /// <summary>
+    ///  **TEST-ONLY hook** – unit-tests can inject a custom
+    ///  <see cref="IMsalHttpClientFactory"/> so that MSAL’s Managed-Identity
+    ///  pipeline uses a mocked <see cref="HttpClient"/> instead of making
+    ///  real network calls.
+    /// </summary>
+    internal static class ManagedIdentityTestHooks
+    {
+        internal static IMsalHttpClientFactory? HttpClientFactoryOverride { get; set; }
+    }
+}
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net462/InternalAPI.Unshipped.txt b/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net462/InternalAPI.Unshipped.txt
@@ -0,0 +1,3 @@
+Microsoft.Identity.Web.ManagedIdentityTestHooks
+static Microsoft.Identity.Web.ManagedIdentityTestHooks.HttpClientFactoryOverride.get -> Microsoft.Identity.Client.IMsalHttpClientFactory?
+static Microsoft.Identity.Web.ManagedIdentityTestHooks.HttpClientFactoryOverride.set -> void
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net462/PublicAPI.Unshipped.txt b/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net462/PublicAPI.Unshipped.txt
@@ -0,0 +1 @@
+static Microsoft.Identity.Web.TestOnly.TokenAcquirerFactoryTesting.UseTestHttpClientFactory(Microsoft.Identity.Client.IMsalHttpClientFactory! factory) -> void
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net472/InternalAPI.Unshipped.txt b/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net472/InternalAPI.Unshipped.txt
@@ -0,0 +1,3 @@
+Microsoft.Identity.Web.ManagedIdentityTestHooks
+static Microsoft.Identity.Web.ManagedIdentityTestHooks.HttpClientFactoryOverride.get -> Microsoft.Identity.Client.IMsalHttpClientFactory?
+static Microsoft.Identity.Web.ManagedIdentityTestHooks.HttpClientFactoryOverride.set -> void
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net472/PublicAPI.Unshipped.txt b/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net472/PublicAPI.Unshipped.txt
@@ -0,0 +1 @@
+static Microsoft.Identity.Web.TestOnly.TokenAcquirerFactoryTesting.UseTestHttpClientFactory(Microsoft.Identity.Client.IMsalHttpClientFactory! factory) -> void
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net6.0/InternalAPI.Unshipped.txt b/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net6.0/InternalAPI.Unshipped.txt
@@ -0,0 +1,3 @@
+Microsoft.Identity.Web.ManagedIdentityTestHooks
+static Microsoft.Identity.Web.ManagedIdentityTestHooks.HttpClientFactoryOverride.get -> Microsoft.Identity.Client.IMsalHttpClientFactory?
+static Microsoft.Identity.Web.ManagedIdentityTestHooks.HttpClientFactoryOverride.set -> void
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net6.0/PublicAPI.Unshipped.txt b/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net6.0/PublicAPI.Unshipped.txt
@@ -0,0 +1 @@
+static Microsoft.Identity.Web.TestOnly.TokenAcquirerFactoryTesting.UseTestHttpClientFactory(Microsoft.Identity.Client.IMsalHttpClientFactory! factory) -> void
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net7.0/InternalAPI.Unshipped.txt b/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net7.0/InternalAPI.Unshipped.txt
@@ -0,0 +1,3 @@
+Microsoft.Identity.Web.ManagedIdentityTestHooks
+static Microsoft.Identity.Web.ManagedIdentityTestHooks.HttpClientFactoryOverride.get -> Microsoft.Identity.Client.IMsalHttpClientFactory?
+static Microsoft.Identity.Web.ManagedIdentityTestHooks.HttpClientFactoryOverride.set -> void
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net7.0/PublicAPI.Unshipped.txt b/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net7.0/PublicAPI.Unshipped.txt
@@ -0,0 +1 @@
+static Microsoft.Identity.Web.TestOnly.TokenAcquirerFactoryTesting.UseTestHttpClientFactory(Microsoft.Identity.Client.IMsalHttpClientFactory! factory) -> void
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net8.0/InternalAPI.Unshipped.txt b/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net8.0/InternalAPI.Unshipped.txt
@@ -0,0 +1,3 @@
+Microsoft.Identity.Web.ManagedIdentityTestHooks
+static Microsoft.Identity.Web.ManagedIdentityTestHooks.HttpClientFactoryOverride.get -> Microsoft.Identity.Client.IMsalHttpClientFactory?
+static Microsoft.Identity.Web.ManagedIdentityTestHooks.HttpClientFactoryOverride.set -> void
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net8.0/PublicAPI.Unshipped.txt b/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net8.0/PublicAPI.Unshipped.txt
@@ -0,0 +1 @@
+static Microsoft.Identity.Web.TestOnly.TokenAcquirerFactoryTesting.UseTestHttpClientFactory(Microsoft.Identity.Client.IMsalHttpClientFactory! factory) -> void
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net9.0/InternalAPI.Unshipped.txt b/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net9.0/InternalAPI.Unshipped.txt
@@ -0,0 +1,3 @@
+Microsoft.Identity.Web.ManagedIdentityTestHooks
+static Microsoft.Identity.Web.ManagedIdentityTestHooks.HttpClientFactoryOverride.get -> Microsoft.Identity.Client.IMsalHttpClientFactory?
+static Microsoft.Identity.Web.ManagedIdentityTestHooks.HttpClientFactoryOverride.set -> void
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net9.0/PublicAPI.Unshipped.txt b/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/net9.0/PublicAPI.Unshipped.txt
@@ -0,0 +1 @@
+static Microsoft.Identity.Web.TestOnly.TokenAcquirerFactoryTesting.UseTestHttpClientFactory(Microsoft.Identity.Client.IMsalHttpClientFactory! factory) -> void
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/netstandard2.0/InternalAPI.Unshipped.txt b/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/netstandard2.0/InternalAPI.Unshipped.txt
@@ -0,0 +1,3 @@
+Microsoft.Identity.Web.ManagedIdentityTestHooks
+static Microsoft.Identity.Web.ManagedIdentityTestHooks.HttpClientFactoryOverride.get -> Microsoft.Identity.Client.IMsalHttpClientFactory?
+static Microsoft.Identity.Web.ManagedIdentityTestHooks.HttpClientFactoryOverride.set -> void
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/netstandard2.0/PublicAPI.Unshipped.txt b/src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/netstandard2.0/PublicAPI.Unshipped.txt
@@ -0,0 +1 @@
+static Microsoft.Identity.Web.TestOnly.TokenAcquirerFactoryTesting.UseTestHttpClientFactory(Microsoft.Identity.Client.IMsalHttpClientFactory! factory) -> void
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/TokenAcquirerFactoryTesting.cs b/src/Microsoft.Identity.Web.TokenAcquisition/TokenAcquirerFactoryTesting.cs
@@ -1,6 +1,9 @@
 ﻿// Copyright (c) Microsoft Corporation. All rights reserved.
 // Licensed under the MIT License.
 
+using System.Net.Http;
+using Microsoft.Identity.Client;
+
 namespace Microsoft.Identity.Web.TestOnly
 {
     /// <summary>
@@ -17,5 +20,13 @@ public static void ResetTokenAcquirerFactoryInTest()
         {
             TokenAcquirerFactory.ResetDefaultInstance();
         }
+
+        /// <summary>
+        /// Injects a custom <see cref="IMsalHttpClientFactory"/> so that all
+        /// Managed-Identity calls made during the current test use the supplied
+        /// (mocked) <see cref="HttpClient"/>.
+        /// </summary>
+        public static void UseTestHttpClientFactory(IMsalHttpClientFactory factory)
+            => ManagedIdentityTestHooks.HttpClientFactoryOverride = factory;
     }
 }
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/TokenAcquisition.ManagedIdentity.cs b/src/Microsoft.Identity.Web.TokenAcquisition/TokenAcquisition.ManagedIdentity.cs
@@ -2,6 +2,8 @@
 // Licensed under the MIT License.
 
 using System.Collections.Concurrent;
+using System.Collections.Generic;
+using System.Linq;
 using System.Threading;
 using System.Threading.Tasks;
 using Microsoft.Identity.Abstractions;
@@ -62,6 +64,7 @@ internal async Task<IManagedIdentityApplication> GetOrBuildManagedIdentityApplic
                 // Build the application
                 application = BuildManagedIdentityApplication(
                     managedIdentityId,
+                    mergedOptions.ClientCapabilities,
                     mergedOptions.ConfidentialClientApplicationOptions.EnablePiiLogging
                 );
 
@@ -80,17 +83,36 @@ internal async Task<IManagedIdentityApplication> GetOrBuildManagedIdentityApplic
         /// Creates a managed identity client application.
         /// </summary>
         /// <param name="managedIdentityId">Indicates if system-assigned or user-assigned managed identity is used.</param>
+        /// <param name="capabilities">Indicates the capabilities of the managed identity application.</param>
         /// <param name="enablePiiLogging">Indicates if logging that may contain personally identifiable information is enabled.</param>
         /// <returns>A managed identity application.</returns>
-        private IManagedIdentityApplication BuildManagedIdentityApplication(ManagedIdentityId managedIdentityId, bool enablePiiLogging)
+        private IManagedIdentityApplication BuildManagedIdentityApplication(
+            ManagedIdentityId managedIdentityId,
+            IEnumerable<string>? capabilities,
+            bool enablePiiLogging)
         {
-            return ManagedIdentityApplicationBuilder
+            ManagedIdentityApplicationBuilder miBuilder = ManagedIdentityApplicationBuilder
                 .Create(managedIdentityId)
                 .WithLogging(
                     Log,
                     ConvertMicrosoftExtensionsLogLevelToMsal(_logger),
-                    enablePiiLogging: enablePiiLogging)
-                .Build();
+                    enablePiiLogging: enablePiiLogging);
+
+            if (capabilities?.Any() == true)
+            {
+                miBuilder.WithClientCapabilities(capabilities);
+            }
+
+            // TEST-ONLY: if a test has supplied a factory, use it; otherwise stay default
+            // Default factory is handled by MSAL
+            if (ManagedIdentityTestHooks.HttpClientFactoryOverride is not null)
+            { 
+                miBuilder.WithHttpClientFactory(
+                ManagedIdentityTestHooks.HttpClientFactoryOverride);
+            }
+
+            return miBuilder.Build();
+
         }
 
         /// <summary>
diff --git a/src/Microsoft.Identity.Web.TokenAcquisition/TokenAcquisition.cs b/src/Microsoft.Identity.Web.TokenAcquisition/TokenAcquisition.cs
@@ -499,7 +499,15 @@ public async Task<AuthenticationResult> GetAuthenticationResultForAppAsync(
                         mergedOptions,
                         tokenAcquisitionOptions.ManagedIdentity
                     );
-                    return await managedIdApp.AcquireTokenForManagedIdentity(scope).ExecuteAsync().ConfigureAwait(false);
+
+                    var miBuilder = managedIdApp.AcquireTokenForManagedIdentity(scope);
+
+                    if (!string.IsNullOrEmpty(tokenAcquisitionOptions.Claims))
+                    {
+                        miBuilder.WithClaims(tokenAcquisitionOptions.Claims);
+                    }
+
+                    return await miBuilder.ExecuteAsync().ConfigureAwait(false);
                 }
                 catch (Exception ex)
                 {
diff --git a/tests/DevApps/daemon-app/daemon-app-msi/Program - SDK.cs b/tests/DevApps/daemon-app/daemon-app-msi/Program - SDK.cs
@@ -0,0 +1,37 @@
+﻿// Copyright (c) Microsoft Corporation. All rights reserved.
+// Licensed under the MIT License.
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Microsoft.Identity.Abstractions;
+using Microsoft.Identity.Web;
+using System.Net;
+using System.Text.Json;
+// ── 1. bootstrap factory (reads appsettings.json automatically) ─────────
+var factory = TokenAcquirerFactory.GetDefaultInstance();
+// optional console logging
+factory.Services.AddLogging(b => b.AddConsole().SetMinimumLevel(LogLevel.Warning));
+// ── 2. register the downstream API using the "AzureKeyVault" section ────
+factory.Services.AddDownstreamApi("AzureKeyVault",
+    factory.Configuration.GetSection("AzureKeyVault"));
+var sp = factory.Build();
+var api = sp.GetRequiredService<IDownstreamApi>();
+// ── 3. call the vault (app-token path) ──────────────────────────────────
+var response = await api.CallApiForAppAsync("AzureKeyVault");
+if (response.StatusCode == HttpStatusCode.OK)
+{
+    using var doc = JsonDocument.Parse(await response.Content.ReadAsStringAsync());
+    if (doc.RootElement.TryGetProperty("value", out var valueElement) && valueElement.ValueKind == JsonValueKind.String)
+    {
+        string secret = valueElement.GetString()!;
+        Console.WriteLine($"Secret value = {secret}");
+    }
+    else
+    {
+        Console.WriteLine("The 'value' property is missing or is not a string.");
+    }
+}
+else
+{
+    Console.WriteLine($"Vault returned {(int)response.StatusCode} {response.ReasonPhrase}");
+}
diff --git a/tests/DevApps/daemon-app/daemon-app-msi/Program-net60.cs b/tests/DevApps/daemon-app/daemon-app-msi/Program-net60.cs
@@ -0,0 +1,37 @@
+﻿// Copyright (c) Microsoft Corporation. All rights reserved.
+// Licensed under the MIT License.
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Microsoft.Identity.Abstractions;
+using Microsoft.Identity.Web;
+using System.Net;
+using System.Text.Json;
+// ── 1. bootstrap factory (reads appsettings.json automatically) ─────────
+var factory = TokenAcquirerFactory.GetDefaultInstance();
+// optional console logging
+factory.Services.AddLogging(b => b.AddConsole().SetMinimumLevel(LogLevel.Warning));
+// ── 2. register the downstream API using the "AzureKeyVault" section ────
+factory.Services.AddDownstreamApi("AzureKeyVault",
+    factory.Configuration.GetSection("AzureKeyVault"));
+var sp = factory.Build();
+var api = sp.GetRequiredService<IDownstreamApi>();
+// ── 3. call the vault (app-token path) ──────────────────────────────────
+var response = await api.CallApiForAppAsync("AzureKeyVault");
+if (response.StatusCode == HttpStatusCode.OK)
+{
+    using var doc = JsonDocument.Parse(await response.Content.ReadAsStringAsync());
+    if (doc.RootElement.TryGetProperty("value", out var valueElement) && valueElement.ValueKind == JsonValueKind.String)
+    {
+        string secret = valueElement.GetString()!;
+        Console.WriteLine($"Secret value = {secret}");
+    }
+    else
+    {
+        Console.WriteLine("The 'value' property is missing or is not a string.");
+    }
+}
+else
+{
+    Console.WriteLine($"Vault returned {(int)response.StatusCode} {response.ReasonPhrase}");
+}
diff --git a/tests/DevApps/daemon-app/daemon-app-msi/Program.cs b/tests/DevApps/daemon-app/daemon-app-msi/Program.cs
@@ -0,0 +1,37 @@
+﻿// Copyright (c) Microsoft Corporation. All rights reserved.
+// Licensed under the MIT License.
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Microsoft.Identity.Abstractions;
+using Microsoft.Identity.Web;
+using System.Net;
+using System.Text.Json;
+// ── 1. bootstrap factory (reads appsettings.json automatically) ─────────
+var factory = TokenAcquirerFactory.GetDefaultInstance();
+// optional console logging
+factory.Services.AddLogging(b => b.AddConsole().SetMinimumLevel(LogLevel.Warning));
+// ── 2. register the downstream API using the "AzureKeyVault" section ────
+factory.Services.AddDownstreamApi("AzureKeyVault",
+    factory.Configuration.GetSection("AzureKeyVault"));
+var sp = factory.Build();
+var api = sp.GetRequiredService<IDownstreamApi>();
+// ── 3. call the vault (app-token path) ──────────────────────────────────
+var response = await api.CallApiForAppAsync("AzureKeyVault");
+if (response.StatusCode == HttpStatusCode.OK)
+{
+    using var doc = JsonDocument.Parse(await response.Content.ReadAsStringAsync());
+    if (doc.RootElement.TryGetProperty("value", out var valueElement) && valueElement.ValueKind == JsonValueKind.String)
+    {
+        string secret = valueElement.GetString()!;
+        Console.WriteLine($"Secret value = {secret}");
+    }
+    else
+    {
+        Console.WriteLine("The 'value' property is missing or is not a string.");
+    }
+}
+else
+{
+    Console.WriteLine($"Vault returned {(int)response.StatusCode} {response.ReasonPhrase}");
+}
diff --git a/tests/DevApps/daemon-app/daemon-app-msi/appsettings.json b/tests/DevApps/daemon-app/daemon-app-msi/appsettings.json
@@ -0,0 +1,18 @@
+{
+    "AzureKeyVault": {
+        "BaseUrl": "https://revoguardkeyvault.vault.azure.net/",
+        "RelativePath": "secrets/RevoGuardSecret?api-version=7.4",
+        "RequestAppToken": true,
+        "Scopes": [ "https://vault.azure.net/.default" ],
+        // capabilities for the client are not being passed
+        // need to fix this in the next commit
+        "ClientCapabilities": [ "cp1" ],
+
+        "AcquireTokenOptions": {
+            "ManagedIdentity": {
+                // ► leave empty for system-assigned MI
+                "UserAssignedClientId": "04ca4d6a-c720-4ba1-aa06-f6634b73fe7a"
+            }
+        }
+    }
+}
diff --git a/tests/DevApps/daemon-app/daemon-app-msi/daemon-app-msi.csproj b/tests/DevApps/daemon-app/daemon-app-msi/daemon-app-msi.csproj
@@ -0,0 +1,39 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <OutputType>Exe</OutputType>
+    <TargetFrameworks>net8.0</TargetFrameworks>
+    <RootNamespace>Daemon_app</RootNamespace>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <Nullable>enable</Nullable>
+    <LangVersion>13</LangVersion>
+    <IsPackable>false</IsPackable>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <Compile Remove="Program - SDK.cs" />
+    <Compile Remove="Program-net60.cs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <None Include="Program - SDK.cs" />
+    <None Include="Program-net60.cs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Newtonsoft.Json" Version="13.0.1" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\..\..\..\src\Microsoft.Identity.Web.DownstreamApi\Microsoft.Identity.Web.DownstreamApi.csproj" />
+    <ProjectReference Include="..\..\..\..\src\Microsoft.Identity.Web.GraphServiceClient\Microsoft.Identity.Web.GraphServiceClient.csproj" />
+    <ProjectReference Include="..\..\..\..\src\Microsoft.Identity.Web.TokenAcquisition\Microsoft.Identity.Web.TokenAcquisition.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <None Update="appsettings.json">
+      <CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>
+    </None>
+  </ItemGroup>
+
+</Project>
diff --git a/tests/Microsoft.Identity.Web.Test.Common/Mocks/MockHttpCreator.cs b/tests/Microsoft.Identity.Web.Test.Common/Mocks/MockHttpCreator.cs
diff --git a/tests/Microsoft.Identity.Web.Test/FmiTests.cs b/tests/Microsoft.Identity.Web.Test/FmiTests.cs
diff --git a/tests/Microsoft.Identity.Web.Test/ManagedIdentityCaeTests.cs b/tests/Microsoft.Identity.Web.Test/ManagedIdentityCaeTests.cs
diff --git a/tests/Microsoft.Identity.Web.Test/TokenAcquirerCollection.cs b/tests/Microsoft.Identity.Web.Test/TokenAcquirerCollection.cs

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+Microsoft.Identity.Web.ManagedIdentityTestHooks`
	`2`	`+static Microsoft.Identity.Web.ManagedIdentityTestHooks.HttpClientFactoryOverride.get -> Microsoft.Identity.Client.IMsalHttpClientFactory?`
	`3`	`+static Microsoft.Identity.Web.ManagedIdentityTestHooks.HttpClientFactoryOverride.set -> void`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+static Microsoft.Identity.Web.TestOnly.TokenAcquirerFactoryTesting.UseTestHttpClientFactory(Microsoft.Identity.Client.IMsalHttpClientFactory! factory) -> void`