Skip to content

Fix OWIN - #4006

Merged
Bogdan Gavril (bgavrilMS) merged 2 commits into
masterfrom
4gust-fix-owin-scope-validation
Aug 28, 2026
Merged

Bogdan Gavril (bgavrilMS) merged 2 commits into
masterfrom
4gust-fix-owin-scope-validation

Conversation

@4gust

@4gust Nilesh Choudhary (4gust) commented Aug 27, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Require scope or role claims for OWIN web API bearer tokens by default while preserving explicit ACL authorization opt-out. Add regression coverage and release guidance.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 9a8d1266-c8f0-4dae-a8cd-32288b0d13d6
@4gust
Nilesh Choudhary (4gust) requested a review from a team as a code owner August 27, 2026 14:34
@4gust Nilesh Choudhary (4gust) changed the title Fix OWIN scope validation bypass Fix OWIN Aug 27, 2026
Exclude OWIN-specific regression tests from net8.0 builds while retaining them for net472.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 9a8d1266-c8f0-4dae-a8cd-32288b0d13d6
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants