Why isn't bot authentication handled at the middleware level?

[cloudsere]

Is your feature request related to a problem? Please describe.
I'm curious why bot authentication isn't handled at the middleware level, as is common with other ASP.NET SDKs. Why is it handled at the adapter level instead?

Describe the solution you'd like
We can easily expose middleware in the extension, reusing the existing authentication method defined in the ConfigurationBotFrameworkAuthentication class.

[Nivedipa-MSFT]

@cloudsere - Thank you for your suggestion!

We appreciate your input. To ensure your idea is considered for future updates, we recommend submitting it through the Teams Feedback Portal. Feature requests are reviewed by the engineering team and may be prioritized based on various factors, including the number of requests received.

If you have any additional thoughts or feedback, please feel free to share them with us. Your contributions are valuable and help improve the product!

Thank you again for your valuable suggestion!

[tracyboehrer]

@cloudsere Thanks for the suggestion. I would not expect to see any changes in Bot Framework SDK around this. But... The next evolution of SDK will be Agents SDK, and how authentication is handled there is entirely different. In fact, it's not technically a part of the SDK anymore. Rather, this is a host issue. For example, we have a sample AspNet authentication extension that setups JWT auth using AspNet facilities, but people can use/add whatever else they need as well.