Post-4.16.0 release

Directory.Build.props

@@ -4,7 +4,7 @@
     <!-- This needs to be greater than or equal to the validation baseline version. The conditional logic around TargetNetNext is there
     to avoid NU5104 for packing a release version library with prerelease deps. By adding preview to it, that warning is avoided.
     -->
-    <MicrosoftIdentityWebVersion Condition="'$(MicrosoftIdentityWebVersion)' == ''">4.15.2</MicrosoftIdentityWebVersion>
+    <MicrosoftIdentityWebVersion Condition="'$(MicrosoftIdentityWebVersion)' == ''">4.16.1</MicrosoftIdentityWebVersion>
     <!--This will generate AssemblyVersion, AssemblyFileVersion and AssemblyInformationVersion-->
     <Version>$(MicrosoftIdentityWebVersion)</Version>
     <EnablePackageValidation>true</EnablePackageValidation>

changelog.md

@@ -1,3 +1,11 @@
+## 4.16.0
+
+### New features
+- Add OpenTelemetry enrichment for FIC app-token acquisition and assertion warm-up through `TokenAcquisitionExtensionOptions.DefaultAppTokenOtelTagsEnricher`, `ClientAssertionCredentialSourceLoaderParameters`, and `IClientAssertionEnrichmentOptions`. Per-request enrichment takes precedence and now flows through credential warm-up and assertion-cache hits; OIDC claims challenges are also forwarded to avoid reusing unsuitable cached assertions. See [#4072](https://github.com/AzureAD/microsoft-identity-web/pull/4072).
+
+### Dependencies updates
+- Update `Microsoft.Identity.Client` and `Microsoft.Identity.Client.KeyAttestation` to 4.90.1, Wilson `Microsoft.IdentityModel.*` to 8.23.0, and OWIN `Microsoft.IdentityModel.*` to 5.7.2. Applications with direct MSAL references must use at least 4.90.1 to avoid package-downgrade errors. See [#4074](https://github.com/AzureAD/microsoft-identity-web/pull/4074).
+
 ## 4.15.0
 
 ### Federated credentials and proof of possession

src/Microsoft.Identity.Web.Certificate/PublicAPI/PublicAPI.Shipped.txt

@@ -16,6 +16,9 @@ Microsoft.Identity.Web.CertificateSource.Path = 3 -> Microsoft.Identity.Web.Cert
 Microsoft.Identity.Web.CertificateSource.StoreWithDistinguishedName = 5 -> Microsoft.Identity.Web.CertificateSource
 Microsoft.Identity.Web.CertificateSource.StoreWithSubjectName = 13 -> Microsoft.Identity.Web.CertificateSource
 Microsoft.Identity.Web.CertificateSource.StoreWithThumbprint = 4 -> Microsoft.Identity.Web.CertificateSource
+Microsoft.Identity.Web.ClientAssertionCredentialSourceLoaderParameters
+Microsoft.Identity.Web.ClientAssertionCredentialSourceLoaderParameters.ClientAssertionCredentialSourceLoaderParameters(string! clientId, string! authority, System.Action<Microsoft.Identity.Client.Extensibility.ExecutionResult!, System.Collections.Generic.IList<System.Collections.Generic.KeyValuePair<string!, object!>>!>? otelTagsEnricher = null) -> void
+Microsoft.Identity.Web.ClientAssertionCredentialSourceLoaderParameters.OtelTagsEnricher.get -> System.Action<Microsoft.Identity.Client.Extensibility.ExecutionResult!, System.Collections.Generic.IList<System.Collections.Generic.KeyValuePair<string!, object!>>!>?
 Microsoft.Identity.Web.DefaultCertificateLoader
 Microsoft.Identity.Web.DefaultCertificateLoader.DefaultCertificateLoader() -> void
 Microsoft.Identity.Web.DefaultCertificateLoader.DefaultCertificateLoader(Microsoft.Extensions.Logging.ILogger<Microsoft.Identity.Web.DefaultCertificateLoader!>? logger) -> void

src/Microsoft.Identity.Web.Certificate/PublicAPI/PublicAPI.Unshipped.txt

@@ -1,4 +1 @@
 #nullable enable
-Microsoft.Identity.Web.ClientAssertionCredentialSourceLoaderParameters
-Microsoft.Identity.Web.ClientAssertionCredentialSourceLoaderParameters.ClientAssertionCredentialSourceLoaderParameters(string! clientId, string! authority, System.Action<Microsoft.Identity.Client.Extensibility.ExecutionResult!, System.Collections.Generic.IList<System.Collections.Generic.KeyValuePair<string!, object!>>!>? otelTagsEnricher = null) -> void
-Microsoft.Identity.Web.ClientAssertionCredentialSourceLoaderParameters.OtelTagsEnricher.get -> System.Action<Microsoft.Identity.Client.Extensibility.ExecutionResult!, System.Collections.Generic.IList<System.Collections.Generic.KeyValuePair<string!, object!>>!>?

src/Microsoft.Identity.Web.Certificateless/PublicAPI/PublicAPI.Shipped.txt

@@ -1,4 +1,6 @@
 #nullable enable
+Microsoft.Identity.Web.IClientAssertionEnrichmentOptions
+Microsoft.Identity.Web.IClientAssertionEnrichmentOptions.OtelTagsEnricher.get -> System.Action<Microsoft.Identity.Client.Extensibility.ExecutionResult!, System.Collections.Generic.IList<System.Collections.Generic.KeyValuePair<string!, object!>>!>?
 abstract Microsoft.Identity.Web.ClientAssertionProviderBase.GetClientAssertionAsync(Microsoft.Identity.Client.AssertionRequestOptions? assertionRequestOptions) -> System.Threading.Tasks.Task<Microsoft.Identity.Web.ClientAssertion!>!
 Microsoft.Identity.Web.AzureIdentityForKubernetesClientAssertion
 Microsoft.Identity.Web.AzureIdentityForKubernetesClientAssertion.AzureIdentityForKubernetesClientAssertion(Microsoft.Extensions.Logging.ILogger? logger = null) -> void

src/Microsoft.Identity.Web.Certificateless/PublicAPI/PublicAPI.Unshipped.txt

@@ -1,3 +1 @@
 #nullable enable
-Microsoft.Identity.Web.IClientAssertionEnrichmentOptions
-Microsoft.Identity.Web.IClientAssertionEnrichmentOptions.OtelTagsEnricher.get -> System.Action<Microsoft.Identity.Client.Extensibility.ExecutionResult!, System.Collections.Generic.IList<System.Collections.Generic.KeyValuePair<string!, object!>>!>?

src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/NetCore/PublicAPI.Shipped.txt

@@ -1,4 +1,6 @@
 #nullable enable
+Microsoft.Identity.Web.TokenAcquisitionExtensionOptions.DefaultAppTokenOtelTagsEnricher.get -> System.Action<Microsoft.Identity.Client.Extensibility.ExecutionResult!, System.Collections.Generic.IList<System.Collections.Generic.KeyValuePair<string!, object!>>!>?
+Microsoft.Identity.Web.TokenAcquisitionExtensionOptions.DefaultAppTokenOtelTagsEnricher.set -> void
 const Microsoft.Identity.Web.ClaimConstants.Acr = "acr" -> string!
 const Microsoft.Identity.Web.ClaimConstants.ClientInfo = "client_info" -> string!
 const Microsoft.Identity.Web.ClaimConstants.Name = "name" -> string!

src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/NetCore/PublicAPI.Unshipped.txt

@@ -1,3 +1 @@
 #nullable enable
-Microsoft.Identity.Web.TokenAcquisitionExtensionOptions.DefaultAppTokenOtelTagsEnricher.get -> System.Action<Microsoft.Identity.Client.Extensibility.ExecutionResult!, System.Collections.Generic.IList<System.Collections.Generic.KeyValuePair<string!, object!>>!>?
-Microsoft.Identity.Web.TokenAcquisitionExtensionOptions.DefaultAppTokenOtelTagsEnricher.set -> void

src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/NetFramework/PublicAPI.Shipped.txt

@@ -1,4 +1,6 @@
 #nullable enable
+Microsoft.Identity.Web.TokenAcquisitionExtensionOptions.DefaultAppTokenOtelTagsEnricher.get -> System.Action<Microsoft.Identity.Client.Extensibility.ExecutionResult!, System.Collections.Generic.IList<System.Collections.Generic.KeyValuePair<string!, object!>>!>?
+Microsoft.Identity.Web.TokenAcquisitionExtensionOptions.DefaultAppTokenOtelTagsEnricher.set -> void
 const Microsoft.Identity.Web.ClaimConstants.Acr = "acr" -> string!
 const Microsoft.Identity.Web.ClaimConstants.ClientInfo = "client_info" -> string!
 const Microsoft.Identity.Web.ClaimConstants.Name = "name" -> string!

src/Microsoft.Identity.Web.TokenAcquisition/PublicAPI/NetFramework/PublicAPI.Unshipped.txt

@@ -1,3 +1 @@
 #nullable enable
-Microsoft.Identity.Web.TokenAcquisitionExtensionOptions.DefaultAppTokenOtelTagsEnricher.get -> System.Action<Microsoft.Identity.Client.Extensibility.ExecutionResult!, System.Collections.Generic.IList<System.Collections.Generic.KeyValuePair<string!, object!>>!>?
-Microsoft.Identity.Web.TokenAcquisitionExtensionOptions.DefaultAppTokenOtelTagsEnricher.set -> void