Skip to content

[Bug] WWW-Authentication parser should strip the optional v2.0 form authorization uri  #4416

@bgavrilMS

Description

@bgavrilMS

Library version used

4.56

.NET version

all

Scenario

Other - please specify

Is this a new or an existing app?

This is a new app or experiment

Issue description and reproduction steps

https://login.microsoftonline.com//common/v2.0/.well-known/openid-configuration

See how the authroization uri is "authorization_endpoint": "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",

Our WWW-Authenticate parser doesn't convert this correctly to an authority, see https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/blob/main/src/client/Microsoft.Identity.Client/WwwAuthenticateParameters.cs#L424

Relevant code snippets

No response

Expected behavior

Strip out the v2.0 but only if it exists

Identity provider

Microsoft Entra ID (Work and School accounts and Personal Microsoft accounts)

Regression

No response

Solution and workarounds

No response

Metadata

Metadata

Assignees

Type

No type
No fields configured for issues without a type.

Projects

Status
Done

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions