v1.6.0

What's Changed

• Deprecate ROPC flow by @Ugonnaak1 in #584
• Added a cache lookup for AcquireTokenByCredential by @4gust in #590
• Fix panic in AcquireTokenSilent for public clients due to nil Credential by @4gust in #581
• Adding support for FMI (Federated Managed Identity) by @4gust in #586
• Adjust issuer validation to handle cases where instance discovery is not performed by @Avery-Dunn in #591

New Contributors

• @Ugonnaak1 made their first contribution in #584

Full Changelog: v1.5.0...v1.6.0

v1.5.0

What's Changed

• Bump github.com/golang-jwt/jwt/v5 from 5.0.0 to 5.2.2 by @dependabot[bot] in #563
• Added a FIC test by @4gust in #557
• Fix CodeQL warning 'Cross-site scripting vulnerability due to user-provided value by @fengga in #566
• fix: support both login.partner.microsoftonline.cn and login.chinaclo… by @Achiket123 in #575
• Add validation for issuer returned by OIDC endpoint by @Avery-Dunn in #576
• #572 - Update spelling of client by @equalsgibson in #573

New Contributors

• @dependabot[bot] made their first contribution in #563
• @fengga made their first contribution in #566
• @Achiket123 made their first contribution in #575
• @Avery-Dunn made their first contribution in #576
• @equalsgibson made their first contribution in #573

Full Changelog: v1.4.2...v1.5.0

v1.4.2

What's Changed

• Support for refresh_in for ConfidentialClient by @4gust in #542
• Update Unit tests by @4gust in #560
• Exposing necessary types from each client by @4gust in #561
• 4gust/cca 256sha support by @4gust in #562
• Updated the version info by @4gust in #564

Full Changelog: v1.4.1...v1.4.2

v1.4.1

What's Changed

• Fixing // #nosec G101 issue on MSI by @4gust in #554
• Unmarshal device code verification URLs by @chlowell in #556

Full Changelog: v1.4.0...v1.4.1

v1.4.0

Release Summary: Add Managed Identity Support

Overview

This Release introduces Managed Identity support to the Microsoft Authentication Library for Go through a new client. The new client supports multiple sources for managed identities, including:

• IMDS
• Azure Arc
• Service Fabric
• App Service
• Azure Machine Learning
• Cloud Shell

The client can handle both System Assigned Managed Identities and User Assigned Managed Identities.
For user-assigned identities, you can specify:

• Client ID
• Resource ID
• Object ID

Key Changes

• New Managed Identity Client: Added a new client to handle managed identity authentication.
• Multiple Sources Support: The client supports various managed identity sources, enhancing flexibility and usability.
• Tests: Comprehensive tests have been added to ensure the reliability and correctness of the new functionality.
• Documentation: Updated documentation to include details on the new managed identity client and usage instructions.

Code Sample

Here's a basic example of how to use the new managed identity client to acquire a token:

package main

import (
    "context"
    "fmt"
    "github.com/AzureAD/microsoft-authentication-library-for-go/msal"
)

func main() {
	miSystemAssigned, err := mi.New(mi.SystemAssigned())
	if err != nil {
		log.Fatal(err)
	}
	result, err := miSystemAssigned.AcquireToken(context.TODO(), "https://management.azure.com")
	if err != nil {
		log.Fatal(err)
	}
	fmt.Println("token expire at : ", result.ExpiresOn)
}

v1.3.3

What's Changed

• fix: username password flow by @mohanjith in #536
• Fix Bug: Prevent Empty Region in WithAzureRegion from Overriding MSAL_FORCE_REGION by @4gust in #545

New Contributors

• @mohanjith made their first contribution in #536

Full Changelog: v1.3.2...v1.3.3

v1.3.2

Re-release v1.3.2, which was accidentally tagged as v.1.3.2

What's Changed

• Revert WithTenantID("adfs") regression by @chlowell in #529
• Create release.md by @bgavrilMS in #530

Full Changelog: v1.3.1...v1.3.2

v1.3.1

What's Changed

• Fix invalid authority uri by @bgavrilMS in #526
• If authority segments <3, throw by @bgavrilMS in #528
• dSTS support

Full Changelog: v1.2.3...v1.3.1

v1.2.3

What's Changed

• Fix samples link by @epelc in #483
• apps/internal/local: html escape error desc query string by @flavianmissi in #465
• Always close the IMDS response body by @qmuntal in #478
• Update authority.go by @bgavrilMS in #493
• Added a new variable in AuthRepsonse "IsFromCache" by @4gust in #498
• Replace MethodByName with type assertions by @chlowell in #510
• Wrap ResolveEndpoints error by @kgeckhart in #515
• Added Region auto enable by @4gust in #523

New Contributors

• @epelc made their first contribution in #483
• @pmaytak made their first contribution in #481
• @flavianmissi made their first contribution in #465
• @qmuntal made their first contribution in #478
• @kgeckhart made their first contribution in #515

Full Changelog: v1.2.2...v1.2.3

MSAL Go 1.2.2

Adds support for using the AuthScheme extensibility point for ROPC Support authnscheme in AcquireByUsernamePassword