Skip to content

Flow outgoing request to header providers via AcquireTokenOptions #3876

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
neha-bhargava merged 5 commits into from
Jun 19, 2026
+5 −0
Merged

Flow outgoing request to header providers via AcquireTokenOptions #3876

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
379f886
Pass outgoing request to request-aware authorization header provider
neha-bhargava Jun 18, 2026
912f026
Pass outgoing request via AcquireTokenOptions.ExtraParameters
neha-bhargava Jun 19, 2026
9a41e20
Merge upstream/master into nebharg/outbound-shr-qhb
neha-bhargava Jun 19, 2026
cff97e0
Merge branch 'master' into nebharg/outbound-shr-qhb
neha-bhargava Jun 19, 2026
89db497
Merge branch 'master' into nebharg/outbound-shr-qhb
neha-bhargava Jun 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions src/Microsoft.Identity.Web.DownstreamApi/DownstreamApi.cs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -733,6 +733,11 @@ public Task<HttpResponseMessage> CallApiForAppAsync(
}
else
{
// Make the outgoing request available to request-binding protocols (e.g. PoP SHR q/h/b) via the
// AcquireTokenOptions.ExtraParameters SDK-to-SDK channel. Content is already set above. The helper
// clones ExtraParameters before writing so concurrent calls never share this per-request value.
effectiveOptions.AcquireTokenOptions.SetHttpRequestMessage(httpRequestMessage);

authorizationHeader = await _authorizationHeaderProvider.CreateAuthorizationHeaderAsync(
effectiveOptions.Scopes,
effectiveOptions,
Expand Down
Loading