update test certs (#3424)

jennyf19 · web-flow · commit deedd9dd8179 · 2025-07-19T17:08:21.000-07:00
* update test certs

* remove propertygroup
diff --git a/benchmark/appsettings.json b/benchmark/appsettings.json
@@ -5,9 +5,9 @@
         "ClientId": "f6b698c0-140c-448f-8155-4aa9bf77ceba",
         "ClientCredentials": [
             {
-                "SourceType": "KeyVault",
-                "KeyVaultUrl": "https://webappsapistests.vault.azure.net",
-                "KeyVaultCertificateName": "Self-Signed-5-5-22"
+                "SourceType": "StoreWithDistinguishedName",
+                "CertificateStorePath": "LocalMachine/My",
+                "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"
             }
         ]
     }
diff --git a/tests/DevApps/ContosoWorker/appsettings.json b/tests/DevApps/ContosoWorker/appsettings.json
@@ -5,9 +5,9 @@
         "ClientId": "f6b698c0-140c-448f-8155-4aa9bf77ceba",
         "ClientCredentials": [
             {
-                "SourceType": "KeyVault",
-                "KeyVaultUrl": "https://webappsapistests.vault.azure.net",
-                "KeyVaultCertificateName": "Self-Signed-5-5-22"
+                "SourceType": "StoreWithDistinguishedName",
+                "CertificateStorePath": "LocalMachine/My",
+                "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"
             }
         ]
     },
diff --git a/tests/DevApps/WebAppCallsMicrosoftGraph/appsettings.json b/tests/DevApps/WebAppCallsMicrosoftGraph/appsettings.json
@@ -18,9 +18,9 @@
             //    "ManagedIdentityClientId": ""
             //},
             {
-                "SourceType": "KeyVault",
-                "KeyVaultUrl": "https://webappsapistests.vault.azure.net",
-                "KeyVaultCertificateName": "Self-Signed-5-5-22"
+                "SourceType": "StoreWithDistinguishedName",
+                "CertificateStorePath": "LocalMachine/My",
+                "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"
             }
              //{
              //   "SourceType": "ClientSecret",
diff --git a/tests/DevApps/WebAppCallsWebApiCallsGraph/Client/appsettings.json b/tests/DevApps/WebAppCallsWebApiCallsGraph/Client/appsettings.json
@@ -12,9 +12,9 @@
         // To call an API
         "ClientCertificates": [
             {
-                "SourceType": "KeyVault",
-                "KeyVaultUrl": "https://webappsapistests.vault.azure.net",
-                "KeyVaultCertificateName": "Self-Signed-5-5-22"
+                "SourceType": "StoreWithDistinguishedName",
+                "CertificateStorePath": "LocalMachine/My",
+                "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"
             }
         ]
     },
diff --git a/tests/DevApps/WebAppCallsWebApiCallsGraph/TodoListService/appsettings.json b/tests/DevApps/WebAppCallsWebApiCallsGraph/TodoListService/appsettings.json
@@ -19,9 +19,9 @@
         //"ClientSecret": null,
         "ClientCertificates": [
             {
-                "SourceType": "KeyVault",
-                "KeyVaultUrl": "https://webappsapistests.vault.azure.net",
-                "KeyVaultCertificateName": "Self-Signed-5-5-22"
+                "SourceType": "StoreWithDistinguishedName",
+                "CertificateStorePath": "LocalMachine/My",
+                "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"
             }
         ],
         "Scopes": "access_as_user",
diff --git a/tests/DevApps/WebAppCallsWebApiCallsGraph/gRPC/appsettings.json b/tests/DevApps/WebAppCallsWebApiCallsGraph/gRPC/appsettings.json
@@ -6,9 +6,9 @@
         "ClientId": "556d438d-2f4b-4add-9713-ede4e5f5d7da",
         "ClientCertificates": [
             {
-                "SourceType": "KeyVault",
-                "KeyVaultUrl": "https://webappsapistests.vault.azure.net",
-                "KeyVaultCertificateName": "Self-Signed-5-5-22"
+                "SourceType": "StoreWithDistinguishedName",
+                "CertificateStorePath": "LocalMachine/My",
+                "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"
             }
         ]
     },
diff --git a/tests/DevApps/aspnet-mvc/OwinWebApi/appsettings.json b/tests/DevApps/aspnet-mvc/OwinWebApi/appsettings.json
@@ -9,9 +9,9 @@
         "EnableCacheSynchronization": false,
         "ClientCredentials": [
             {
-                "SourceType": "KeyVault",
-                "KeyVaultUrl": "https://webappsapistests.vault.azure.net",
-                "KeyVaultCertificateName": "Self-Signed-5-5-22"
+                "SourceType": "StoreWithDistinguishedName",
+                "CertificateStorePath": "LocalMachine/My",
+                "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"
             }
         ],
         "TokenDecryptionCertificates": [
diff --git a/tests/DevApps/aspnet-mvc/OwinWebApp/appsettings.json b/tests/DevApps/aspnet-mvc/OwinWebApp/appsettings.json
@@ -9,9 +9,9 @@
         "EnableCacheSynchronization": false,
         "ClientCredentials": [
             {
-                "SourceType": "KeyVault",
-                "KeyVaultUrl": "https://webappsapistests.vault.azure.net",
-                "KeyVaultCertificateName": "Self-Signed-5-5-22"
+                "SourceType": "StoreWithDistinguishedName",
+                "CertificateStorePath": "LocalMachine/My",
+                "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"
             }
         ]
     },
diff --git a/tests/DevApps/blazor/BlazorApp/appsettings.json b/tests/DevApps/blazor/BlazorApp/appsettings.json
@@ -14,9 +14,9 @@
         // To call an API
         "ClientCredentials": [
             {
-                "SourceType": "KeyVault",
-                "KeyVaultUrl": "https://webappsapistests.vault.azure.net",
-                "KeyVaultCertificateName": "Self-Signed-5-5-22"
+                "SourceType": "StoreWithDistinguishedName",
+                "CertificateStorePath": "LocalMachine/My",
+                "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"
             }
         ]
     },
diff --git a/tests/DevApps/blazorserver-calls-api/Client/appsettings.json b/tests/DevApps/blazorserver-calls-api/Client/appsettings.json
@@ -6,9 +6,9 @@
         "ClientId": "9a192b78-6580-4f8a-aace-f36ffea4f7be",
         "ClientCertificates": [
             {
-                "SourceType": "KeyVault",
-                "KeyVaultUrl": "https://webappsapistests.vault.azure.net",
-                "KeyVaultCertificateName": "Self-Signed-5-5-22"
+                "SourceType": "StoreWithDistinguishedName",
+                "CertificateStorePath": "LocalMachine/My",
+                "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"
             }
         ],
         "CallbackPath": "/signin-oidc"
diff --git a/tests/DevApps/ciam/myWebApp/appsettings.json b/tests/DevApps/ciam/myWebApp/appsettings.json
@@ -11,9 +11,9 @@
             //    "ManagedIdentityClientId": ""
             //},
             {
-                "SourceType": "KeyVault",
-                "KeyVaultUrl": "https://webappsapistests.vault.azure.net",
-                "KeyVaultCertificateName": "Self-Signed-5-5-22"
+                "SourceType": "StoreWithDistinguishedName",
+                "CertificateStorePath": "LocalMachine/My",
+                "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"
             }
             //{
             //   "SourceType": "ClientSecret",
diff --git a/tests/DevApps/daemon-app/Daemon-app/Program - SDK.cs b/tests/DevApps/daemon-app/Daemon-app/Program - SDK.cs
@@ -33,9 +33,9 @@ static async Task Main(string[] args)
                 {
                     new CredentialDescription()
                     {
-                        SourceType = CredentialSource.KeyVault,
-                        KeyVaultUrl = "https://webappsapistests.vault.azure.net",
-                        KeyVaultCertificateName = "Self-Signed-5-5-22",
+                        SourceType = CredentialSource.StoreWithDistinguishedName,
+                        CertificateStorePath = "LocalMachine/My",
+                        CertificateDistinguishedName = "CN=LabAuth.MSIDLab.com"
                     }
                 }
             });
@@ -48,9 +48,9 @@ static async Task Main(string[] args)
                 {
                     new CredentialDescription()
                     {
-                        SourceType = CredentialSource.KeyVault,
-                        KeyVaultUrl = "https://webappsapistests.vault.azure.net",
-                        KeyVaultCertificateName = "Self-Signed-5-5-22",
+                        SourceType = CredentialSource.StoreWithDistinguishedName,
+                        CertificateStorePath = "LocalMachine/My",
+                        CertificateDistinguishedName = "CN=LabAuth.MSIDLab.com"
                     }
                 }
                 );
diff --git a/tests/DevApps/daemon-app/Daemon-app/appsettings.json b/tests/DevApps/daemon-app/Daemon-app/appsettings.json
@@ -5,9 +5,9 @@
         "ClientId": "f6b698c0-140c-448f-8155-4aa9bf77ceba",
         "ClientCredentials": [
             {
-                "SourceType": "KeyVault",
-                "KeyVaultUrl": "https://webappsapistests.vault.azure.net",
-                "KeyVaultCertificateName": "Self-Signed-5-5-22"
+                "SourceType": "StoreWithDistinguishedName",
+                "CertificateStorePath": "LocalMachine/My",
+                "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"
             }
         ]
     }
diff --git a/tests/DevApps/daemon-app/daemon-console-calling-downstreamApi/appsettings.json b/tests/DevApps/daemon-app/daemon-console-calling-downstreamApi/appsettings.json
@@ -5,9 +5,9 @@
     "ClientId": "f6b698c0-140c-448f-8155-4aa9bf77ceba",
     "ClientCredentials": [
       {
-        "SourceType": "KeyVault",
-        "KeyVaultUrl": "https://webappsapistests.vault.azure.net",
-        "KeyVaultCertificateName": "Self-Signed-5-5-22"
+        "SourceType": "StoreWithDistinguishedName",
+        "CertificateStorePath": "LocalMachine/My",
+        "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"
       }
     ]
   },
diff --git a/tests/DevApps/daemon-app/daemon-console-calling-msgraph/appsettings.json b/tests/DevApps/daemon-app/daemon-console-calling-msgraph/appsettings.json
@@ -5,9 +5,9 @@
     "ClientId": "f6b698c0-140c-448f-8155-4aa9bf77ceba",
     "ClientCredentials": [
       {
-        "SourceType": "KeyVault",
-        "KeyVaultUrl": "https://webappsapistests.vault.azure.net",
-        "KeyVaultCertificateName": "Self-Signed-5-5-22"
+        "SourceType": "StoreWithDistinguishedName",
+        "CertificateStorePath": "LocalMachine/My",
+        "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"
       }
     ]
   }
diff --git a/tests/E2E Tests/TokenAcquirerTests/TokenAcquirer.cs b/tests/E2E Tests/TokenAcquirerTests/TokenAcquirer.cs
@@ -30,9 +30,12 @@ public class TokenAcquirer
         private static readonly string s_optionName = string.Empty;
         private static readonly CredentialDescription[] s_clientCredentials = new[]
         {
-            CertificateDescription.FromKeyVault(
-                "https://webappsapistests.vault.azure.net",
-                "Self-Signed-5-5-22")
+            new CredentialDescription
+            {
+                SourceType = CredentialSource.StoreWithDistinguishedName,
+                CertificateStorePath = "LocalMachine/My",
+                CertificateDistinguishedName = "CN=LabAuth.MSIDLab.com"
+            }
         };
 
         private static readonly CredentialDescription[] s_ciamClientCredentials = new[]
diff --git a/tests/Microsoft.Identity.Web.Test/Certificates/WithClientCredentialsTests.cs b/tests/Microsoft.Identity.Web.Test/Certificates/WithClientCredentialsTests.cs
@@ -33,9 +33,9 @@ public async Task FicFails_CertificateFallbackAsync()
 
                 new CredentialDescription
                 {
-                    SourceType = CredentialSource.KeyVault,
-                    KeyVaultUrl = "https://bogus.net",
-                    KeyVaultCertificateName = "Self-Signed-5-5-22"
+                    SourceType = CredentialSource.StoreWithDistinguishedName,
+                    CertificateStorePath = "LocalMachine/My",
+                    CertificateDistinguishedName = "CN=LabAuth.MSIDLab.com"
                 }
             };
 
@@ -91,9 +91,9 @@ public async Task FailsForCerts_ReturnsMeaningfulMessageAsync()
 
             var certCredential1 = new CredentialDescription
             {
-                SourceType = CredentialSource.KeyVault,
-                KeyVaultUrl = "https://bogus.net",
-                KeyVaultCertificateName = "Self-Signed-5-5-22"
+                SourceType = CredentialSource.StoreWithDistinguishedName,
+                CertificateStorePath = "LocalMachine/My",
+                CertificateDistinguishedName = "CN=LabAuth.MSIDLab.com"
             };
             var certCredential2 = new CredentialDescription
             {
@@ -117,9 +117,9 @@ public async Task FailsForFicAndCert_ReturnsMeaningfulMessageAsync()
 
             var certCredential = new CredentialDescription
             {
-                SourceType = CredentialSource.KeyVault,
-                KeyVaultUrl = "https://bogus.net",
-                KeyVaultCertificateName = "Self-Signed-5-5-22"
+                SourceType = CredentialSource.StoreWithDistinguishedName,
+                CertificateStorePath = "LocalMachine/My",
+                CertificateDistinguishedName = "CN=LabAuth.MSIDLab.com"
             };
 
             await RunFailToLoadLogicAsync(new[] { ficCredential, certCredential });
@@ -130,9 +130,9 @@ public async Task FailsForCertAndFic_ReturnsMeaningfulMessageAsync()
         {
             var certCredential = new CredentialDescription
             {
-                SourceType = CredentialSource.KeyVault,
-                KeyVaultUrl = "https://bogus.net",
-                KeyVaultCertificateName = "Self-Signed-5-5-22"
+                SourceType = CredentialSource.StoreWithDistinguishedName,
+                CertificateStorePath = "LocalMachine/My",
+                CertificateDistinguishedName = "CN=LabAuth.MSIDLab.com"
             };
 
             var ficCredential = new CredentialDescription
@@ -149,9 +149,9 @@ public async Task FailsForPodAndCert_ReturnsMeaningfulMessageAsync()
         {
             var certCredential = new CredentialDescription
             {
-                SourceType = CredentialSource.KeyVault,
-                KeyVaultUrl = "https://bogus.net",
-                KeyVaultCertificateName = "Self-Signed-5-5-22"
+                SourceType = CredentialSource.StoreWithDistinguishedName,
+                CertificateStorePath = "LocalMachine/My",
+                CertificateDistinguishedName = "CN=LabAuth.MSIDLab.com"
             };
 
             var ficCredential = new CredentialDescription

Original file line number	Diff line number	Diff line change
`@@ -5,9 +5,9 @@`
`5`	`5`	`"ClientId": "f6b698c0-140c-448f-8155-4aa9bf77ceba",`
`6`	`6`	`"ClientCredentials": [`
`7`	`7`	`{`
`8`		`- "SourceType": "KeyVault",`
`9`		`- "KeyVaultUrl": "https://webappsapistests.vault.azure.net",`
`10`		`- "KeyVaultCertificateName": "Self-Signed-5-5-22"`
	`8`	`+ "SourceType": "StoreWithDistinguishedName",`
	`9`	`+ "CertificateStorePath": "LocalMachine/My",`
	`10`	`+ "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"`
`11`	`11`	`}`
`12`	`12`	`]`
`13`	`13`	`}`
Original file line number	Diff line number	Diff line change
`@@ -18,9 +18,9 @@`
`18`	`18`	`// "ManagedIdentityClientId": ""`
`19`	`19`	`//},`
`20`	`20`	`{`
`21`		`- "SourceType": "KeyVault",`
`22`		`- "KeyVaultUrl": "https://webappsapistests.vault.azure.net",`
`23`		`- "KeyVaultCertificateName": "Self-Signed-5-5-22"`
	`21`	`+ "SourceType": "StoreWithDistinguishedName",`
	`22`	`+ "CertificateStorePath": "LocalMachine/My",`
	`23`	`+ "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"`
`24`	`24`	`}`
`25`	`25`	`//{`
`26`	`26`	`// "SourceType": "ClientSecret",`
Original file line number	Diff line number	Diff line change
`@@ -12,9 +12,9 @@`
`12`	`12`	`// To call an API`
`13`	`13`	`"ClientCertificates": [`
`14`	`14`	`{`
`15`		`- "SourceType": "KeyVault",`
`16`		`- "KeyVaultUrl": "https://webappsapistests.vault.azure.net",`
`17`		`- "KeyVaultCertificateName": "Self-Signed-5-5-22"`
	`15`	`+ "SourceType": "StoreWithDistinguishedName",`
	`16`	`+ "CertificateStorePath": "LocalMachine/My",`
	`17`	`+ "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"`
`18`	`18`	`}`
`19`	`19`	`]`
`20`	`20`	`},`
Original file line number	Diff line number	Diff line change
`@@ -19,9 +19,9 @@`
`19`	`19`	`//"ClientSecret": null,`
`20`	`20`	`"ClientCertificates": [`
`21`	`21`	`{`
`22`		`- "SourceType": "KeyVault",`
`23`		`- "KeyVaultUrl": "https://webappsapistests.vault.azure.net",`
`24`		`- "KeyVaultCertificateName": "Self-Signed-5-5-22"`
	`22`	`+ "SourceType": "StoreWithDistinguishedName",`
	`23`	`+ "CertificateStorePath": "LocalMachine/My",`
	`24`	`+ "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"`
`25`	`25`	`}`
`26`	`26`	`],`
`27`	`27`	`"Scopes": "access_as_user",`
Original file line number	Diff line number	Diff line change
`@@ -6,9 +6,9 @@`
`6`	`6`	`"ClientId": "556d438d-2f4b-4add-9713-ede4e5f5d7da",`
`7`	`7`	`"ClientCertificates": [`
`8`	`8`	`{`
`9`		`- "SourceType": "KeyVault",`
`10`		`- "KeyVaultUrl": "https://webappsapistests.vault.azure.net",`
`11`		`- "KeyVaultCertificateName": "Self-Signed-5-5-22"`
	`9`	`+ "SourceType": "StoreWithDistinguishedName",`
	`10`	`+ "CertificateStorePath": "LocalMachine/My",`
	`11`	`+ "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"`
`12`	`12`	`}`
`13`	`13`	`]`
`14`	`14`	`},`
Original file line number	Diff line number	Diff line change
`@@ -9,9 +9,9 @@`
`9`	`9`	`"EnableCacheSynchronization": false,`
`10`	`10`	`"ClientCredentials": [`
`11`	`11`	`{`
`12`		`- "SourceType": "KeyVault",`
`13`		`- "KeyVaultUrl": "https://webappsapistests.vault.azure.net",`
`14`		`- "KeyVaultCertificateName": "Self-Signed-5-5-22"`
	`12`	`+ "SourceType": "StoreWithDistinguishedName",`
	`13`	`+ "CertificateStorePath": "LocalMachine/My",`
	`14`	`+ "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"`
`15`	`15`	`}`
`16`	`16`	`],`
`17`	`17`	`"TokenDecryptionCertificates": [`
Original file line number	Diff line number	Diff line change
`@@ -14,9 +14,9 @@`
`14`	`14`	`// To call an API`
`15`	`15`	`"ClientCredentials": [`
`16`	`16`	`{`
`17`		`- "SourceType": "KeyVault",`
`18`		`- "KeyVaultUrl": "https://webappsapistests.vault.azure.net",`
`19`		`- "KeyVaultCertificateName": "Self-Signed-5-5-22"`
	`17`	`+ "SourceType": "StoreWithDistinguishedName",`
	`18`	`+ "CertificateStorePath": "LocalMachine/My",`
	`19`	`+ "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"`
`20`	`20`	`}`
`21`	`21`	`]`
`22`	`22`	`},`
Original file line number	Diff line number	Diff line change
`@@ -6,9 +6,9 @@`
`6`	`6`	`"ClientId": "9a192b78-6580-4f8a-aace-f36ffea4f7be",`
`7`	`7`	`"ClientCertificates": [`
`8`	`8`	`{`
`9`		`- "SourceType": "KeyVault",`
`10`		`- "KeyVaultUrl": "https://webappsapistests.vault.azure.net",`
`11`		`- "KeyVaultCertificateName": "Self-Signed-5-5-22"`
	`9`	`+ "SourceType": "StoreWithDistinguishedName",`
	`10`	`+ "CertificateStorePath": "LocalMachine/My",`
	`11`	`+ "CertificateDistinguishedName": "CN=LabAuth.MSIDLab.com"`
`12`	`12`	`}`
`13`	`13`	`],`
`14`	`14`	`"CallbackPath": "/signin-oidc"`