Adopt IAuthorizationHeaderProvider2 from Abstractions 12.3.0#3899
Merged
Conversation
- Bump Microsoft.Identity.Abstractions to 12.3.0 - Implement IAuthorizationHeaderProvider2 on DefaultAuthorizationHeaderProvider and the public BaseAuthorizationHeaderProvider; consolidate all header-creation paths through a single BuildHeaderInformationAsync engine - Propagate TokenAcquisitionMetadata and AdditionalResponseParameters from MSAL onto AuthorizationHeaderInformation via the existing AcquireTokenResultFactory - DownstreamApi and MicrosoftIdentityMessageHandler prefer IAuthorizationHeaderProvider2 for mTLS PoP, with IBoundAuthorizationHeaderProvider kept as a back-compat fallback - Add PublicAPI.Unshipped entries for the new virtuals on BaseAuthorizationHeaderProvider - Add DefaultAuthorizationHeaderProviderV2Tests covering bearer/app/user flows, metadata + additional-response-parameter propagation, and token-binding guard Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
bgavrilMS
reviewed
Jun 29, 2026
bgavrilMS
approved these changes
Jun 29, 2026
gladjohn
reviewed
Jun 29, 2026
gladjohn
left a comment
Contributor
There was a problem hiding this comment.
Two minor maintainability nits on the new mTLS-PoP token-binding dispatch (not blocking).
gladjohn
approved these changes
Jun 29, 2026
- DownstreamApi.cs: hoist isTokenBinding once, reuse in both v2 and legacy branches for consistent operand order; add '// for backwards compatibility.' comment on the legacy IBoundAuthorizationHeaderProvider branch (bgavrilMS, gladjohn). - MicrosoftIdentityMessageHandler.cs: convert the second legacy 'if' into 'else if' of the v2 block and hoist isTokenBinding so mutual exclusivity is structural rather than depending on the early return (gladjohn). Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
bgavrilMS
approved these changes
Jun 30, 2026
This was referenced Jul 3, 2026
Closed
This was referenced Jul 13, 2026
Closed
Merged
Closed
Closed
Closed
Closed
Open
Open
Closed
Open
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
{PR title}
Summary of the changes (Less than 80 chars)
Description
{Detail}
Fixes #{bug number} (in this specific format)