Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

[msal-node] Support updating the client assertion after creating the confidential client

See original GitHub issue

Core Library

MSAL Node (@azure/msal-node)

Wrapper Library

Not Applicable

Description

In MSAL for .NET, the confidential client class has a method confidnetialClient.WithClientAssertion() which allows passing an asynchronous callback to update the client assertion.

The Azure SDK for JS&TS team would like to have this feature also in msal-node!

How does that sound? Feedback appreciated.

Source

Internal (Microsoft)

Issue Analytics

State:
Created 2 years ago
Comments:7 (7 by maintainers)

Top GitHub Comments

1reaction

svrooijcommented, Apr 14, 2022

A use case for this callback functionality is that you’re then able to generate an assertion in the key vault without being able to export the certificate. I’ve build a small extension for the dotnet SDK that dynamically creates an assertion on demand, by sending the unsigned assertion to the keyvault and signing it in the cloud.

more details here and here

1reaction

EmLaubercommented, Feb 2, 2022

Work item is created & added to backlog. As Jason said, can’t comment yet on priority. CC @sameerag

Top Results From Across the Web

@azure/msal-node package | Microsoft Learn

clientAssertion - Assertion string that the application uses when requesting a token. Only used in confidential client applications. Assertion should be of type ......

Using certificate credentials with MSAL Node - GitHub

clientAssertion : a string that the application uses when requesting a token. The certificate used to sign the assertion should be set on...

ConfidentialClientApplication | microsoft-authentication ...

Defined in msal-node/src/client/ConfidentialClientApplication.ts:31. Constructor for the ConfidentialClientApplication. Required attributes in the ...

msal - Can I use acquireTokenByclientCredential using ...

To perform the app-only authentication, you need to use a client secret or a client assertion, which means that your client should be ......

Azure devops client credentials flow - Grande Pelle

Here I will go through how to generate a client assertion and get the ... 2.0 client credentials grant flow permits a web...