Skip to content

Latest commit

 

History

History
509 lines (396 loc) · 17.5 KB

CHANGELOG.md

File metadata and controls

509 lines (396 loc) · 17.5 KB
Raw

[Next release]:

  • Add native auth instructions to error description when reset password required is returned (#2582)

[1.6.1]:

  • Support extra query parameters on logout endpoint (#2339)
  • Add support functions to help broker improve cross cloud experience (#2361)

[1.6.0]:

  • Support extra query parameters on logout endpoint (#2339)

[1.5.1]:

  • Parse and add STS error codes in token error result (#2319)
  • VisionOS support added (#2139)

[1.5.0]

  • Increased macOS minimum version to 10.15 (#2220)
  • Added Native Auth feature for MacOS to interact with the Microsoft Entra ID services (#2220)

[1.4.2]

  • Fix invalid cert auth request handling (hotfix). (#2278)

[1.4.1]

  • Update Native Auth logging levels for improved clarity and consistency. (#2184)
  • Update common core submodule with changes related to upgrade registration. (#2180)
  • Add a new flag MSALThrottlingCacheHitKey for error returned from client's throttling. (#2257)
  • Update common core submodule with device register action with token protection hint. (#2244)
  • Native Auth logs are appropriately masked to ensure sensitive information is protected. (#2253)

[1.4.0]:

  • Add platform sequence param. #2192
  • Native auth can now store multiple access tokens related to different resources.

[1.3.3]

  • Update common core submodule.
  • Automation improvements.

[1.3.2]

  • Add forceRefresh param to ignore AT in cache and request a new AT.

[1.3.1]

  • Preferred auth method added to device information, returned from broker

[1.3.0]

  • Added Native Auth feature to interact with the Microsoft Entra ID services

[1.2.24]

  • Fix pkey auth after server side removal of registration to use isDeviceRegistered flag from ssoContext.

[1.2.23]

  • Fix pkey auth after server side removal of registration

[1.2.22]

  • Add privacy manifest (#1984)

[1.2.21]

  • Add additional error codes for PSSO KeyId mismatch (#1946)

[1.2.20]

  • Updated common core submodule with changes for platform sso and mapping broker version in token result

[1.2.19]

  • Introduce a way to inject external WKWebviewConfiguration for MSIDWebviewUIController - needed for MSAL C++ (#1308)

[1.2.18]

  • Fix duplicate values for error JIT codes (#1893)

[1.2.17]

  • Added ccs request id header (#1844)
  • Report WPJ v2 telemetry capability. (common core #1297)
  • Add separate error code for OneAuth telemetry purpose (common core #1292)
  • Logging improvements (common core #1290)
  • Rename some internal macro (common core #1300)

[1.2.16]

  • Expose APIs for manually setting time_Interval for request and session resource (#1288)

[1.2.15]

  • Moving master branch history to main (#1787)

[1.2.14]

  • Added method name with line number for errors in telemetry (#1795)

[1.2.13]

  • Remove references to deprecated APIs. (#1779)

[1.2.12]

  • Support read device info when ecc is on. (#1714)
  • Add troubleshooting flow when doing Just in Time registration (#1646)

[1.2.11]

  • Updated extraDeviceInfo to include platform sso status on macOS
  • Created CIAM authority for MSAL (#1682)
  • Add support PKeyAuthPlus and ECC based JWT signature generation. Common Core PR : (#1044)

[1.2.10]

  • Performed testing for CIAM behaviors in MSAL (#1668)

[1.2.9]

  • Add more detailed error codes for JIT (#1639)
  • Add support for nested auth protocol (#1631)

[1.2.8]

  • Fix a crash when identity is nil during getting device registration information on iOS (#1184)

[1.2.7]

  • Fix logger statement (#1630)
  • Address github issue 1141 when getting current account crashes by using await in Swift (#1634)

[1.2.6]

  • Update minimum OS version to iOS14 and macOS 10.13

[1.2.5]

  • Expose additional device information by tenantId

[1.2.4]

  • Expose extra deviceInfo
  • Ignore sign in status on account removal from ODSP cache #1541

[1.2.3]

  • Stop extra background tasks in the system webview case.
  • Minor fixes.

[1.2.2]

  • Minor fixes & CI changes.

[1.2.1]

  • Fixed zipping in release pipeline to preserve symlinks in xcframework

[1.2.0]

  • Multi-tenant PkeyAuth support in MSAL (#1438)
  • Add support to wipe cache for all accounts (#1426)

[1.1.26]

  • Added more string utils in common core (#1417)
  • Fixed links in iframe to open in themselves instead of browser for embedded web views (#1424)

[1.1.25]

  • Added public API to pass EQP to the /token endpoint (#1406)
  • Return device join status regardless of SSO extension error(#1403)

[1.1.24]

  • Use base64URLEncoding for RSA modules (#1399)

[1.1.23]

  • Add helper for cross cloud B2B support in broker (#1370)
  • Add support of "create" prompt (#1384)
  • Fixed bug where background task was prematurely ended. (#1388)

[1.1.22]

  • Added more logging within common core throttling logic
  • Updated release pipeline to publish public docs as last step (#1366)

[1.1.21] - 2021-08-20

  • Update release pipeline to publish public docs (#1359)

[1.1.20] - 2021-07-19

  • Migrated PR validation pipeline from Travis to Azure DevOps.(#1333)

[1.1.19] - 2021-06-14:

  • Changed some of the logging levels from info to verbose per customer request
  • Minimum Xcode version bumped to 12.2
  • Add CCS hint header (#1300)

[1.1.18] - 2021-05-17:

  • Minimum Xcode version bumped to 12.2
  • Add CCS hint header (#1300)
  • Update 'ts' field in AT Pop payload from string to number (#1310)

[1.1.17] - 2021-04-19

  • Added telemetry for different token refresh timing

[1.1.16] - 2021-03-19

  • Support empty or nil access token in MSAL token response (#1256)
  • Implement throttling.

[1.1.15] - 2021-02-19

  • Mask EUII in logs (#1206)
  • Fixes to ADO release pipeline. (#1236)
  • Fixed required attributes in SHR of AT Pop. (#1267)

[1.1.14] - 2021-01-19

  • Removed identity core classes from public api (#1158).
  • Fixed possible deadlock caused by thread explosion (#1175)
  • Added pipeline configuration to generate framework for SPM & automate MSAL release (#1194)
  • Extend iOS background tasks to silent and interactive requests
  • Change order of FRT/MRRT lookup for silent token refreshes

[1.1.13] - 2020-12-04

  • Adding nil check before assigning error when developers try to get account by username from MSALPublicClientApplication, this will help to prevent a crash when passing in nil as error ponter from the API

[1.1.12] - 2020-12-02

  • Added cross-cloud B2B support.
  • Fixed logic to handle links that open in new tab for embedded webview.
  • AccountForUsername from MSALPublicClientApplication will return nil back when username is nil or empty, error will be provided if a valid error pointer is passed in via this API
  • Updated user guide to provide a sample Swift & ObjC code for querying a specific account and return token silently when multiple accounts are present in the cache.
  • Added client-side fix for the known ADFS PKeyAuth issue. (#1150)

[1.1.11] - 2020-10-16

  • Enabled PKeyAuth via UserAgent String on MacOS
  • Added a public API for both iOS and MacOS that returns a default recommended WKWebview configuration settings. This API can be found in MSALWebviewParameters.h, along with an example of usage.
  • Updated MSAL iOS/MacOS test apps to use aforementioned API to generate a default WKWebview object with recommended default settings for the PassedIn mode.
  • Add public interface for asymmetric key/factory for cpp djinni interface
  • Update RSA signing code and add conditional check for supported iOS/osx platforms.
  • Update repo pipelines running on Xcode 12
  • Return private key attributes on key pair generation.
  • Bring in latest from dev branch for iOS 14 build

[1.1.10] - 2020-09-21

  • Fixed account filtering logic by accountId or username where accounts are queried from multiple sources.
  • Fixed isSSOAccount flag on the MSALAccount when MSAL reads accounts from multiple sources.

[1.1.9] - 2020-09-16

  • Ignore duplicate certificate authentication challenge in system webview.
  • Make webview parameters optional in MSALSignoutParameters #1086
  • Support wiping external account #1085
  • Normalize account ID for cache lookups (#1084)
  • Add documentation for Proof-of-Possession for Access tokens.
  • Support forgetting cached account (#1077)
  • Add SSO Seeding call in MSAL Test MacApp
  • Fix custom webview bug in MSAL Test MacApp
  • Update MSIDBaseBrokerOperationRequest in common-core
  • Fix grammar in comments.
  • Support bypassing redirect uri validation on macOS (#1076)
  • Indicate whether SSO extension account is available for device wide SSO (#1065)
  • Add swift static lib target to common core to support AES GCM.
  • Enabled XCODE 11.4 recommended settings by default per customer request.
  • Append 'PkeyAuth/1.0' keyword to the User Agent String to reliably advertise PkeyAuth capability to ADFS.
  • Add a flag to disable logger queue.

[1.1.8] - 2020-08-24

  • Disabling check for validating result Account.
  • Fix unused parameter errors and add macOS specific test mocks.
  • Move openBroswerResponse code into its operation (#1020)
  • Include redirect uri in body when redeeming refresh token at token endpoint (#1020)
  • Expose MSAL SDK Version in public client (#1051)
  • Cleanup noisy SSO extension logs (#1047)
  • Mark RSA public key as extractable (#1049)
  • Cleanup main product targets from test files (#1046)
  • Replaced launch image by launch controller and update test app icon with correct size (#1048)
  • Modify MSALRedirectUri and MSALRedirectUriVerifier to use existing methods from common core (#1045)
  • Save PRT expiry interval in cache to calculate PRT refresh interval more reliably (#1019)
  • update new variable in configuration to allow user by pass URI check (#1013)
  • Refactor crypto code for cpp integration and add api to generate ephemeral asymmetric key pair (#1018)
  • update MSAL test app for SSO Seeding flow #1021
  • update new variable in configuration to allow user by pass URI check #1013
  • Refactor crypto code for cpp integration and add api to generate ephemeral asymmetric key pair. #1018
  • Update logger from Identity Core. (#1009)

[1.1.9] - 2020-08-20

Added

  • Enabled the following XCODE 11.4 recommended settings by default per customer request -CLANG_ANALYZER_LOCALIZABILITY_NONLOCALIZED = YES; -CLANG_WARN_DEPRECATED_OBJC_IMPLEMENTATIONS = YES; -CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF = YES; -Renamed private properties within "MSIDLastRequestTelemetry.m" to address nested dispatch call issues that arise by enabling above implicit retain self setting.
  • Updated supported platforms in readme

[1.1.7] - 2020-07-31

Added

  • New variable in configuration to allow user bypass redirect URI check (#1013)
  • New API to check if compatible AAD broker is available (#1011)

[1.1.6] - 2020-07-24

Added

  • Support proof of possession for access tokens (#926)

Fixed

  • Clean up account metadata on account removal (#999)
  • Silent token lookup for guest accounts with different UPNs (#986)

[1.1.5] - 2020-06-19

Added

  • Switch to PkeyAuth on macOS (common library #734)
  • Support returning additional WPJ info (#931)

Fixed

  • Fixed PkeyAuth when ADFS challenge is URL encoded (common library #750)
  • Fixed CBA handling in MSAL (common library #751)
  • Fixed failing unit tests on 10.15 (#760)
  • Include correlationID in error response (#908)

[1.1.4] - 2020-06-05

Fixed

  • Fix handling of certificate based authentication challenge.

[1.1.3] - 2020-05-22

Added

  • Support client side telemetry in ESTS requests (#930)

Fixed

  • Add logging for enrollment id mismatch for access tokens (#932)
  • Protect legacy macOS cache when MSAL writes into ADAL cache (common core #729)
  • Fix NTLM crash when window is not key (common core #724)
  • Fixed authority validation for developer known authorities (#913)
  • Pass prompt=login for signed out accounts (#919)
  • Don't require URL scheme registration in Info.plist for app extensions (#914)

[1.1.2] - 2020-04-17

Added

  • Support SSO in Safari in AAD SSO extension
  • Additional automation tests for AAD national cloud scenarios
  • Convert access denied error to cancelled on MSAL side (#894)
  • Resolved conflict between initWithParentController API on App Store upload (#893)

[1.1.1] - 2020-03-27

Fixed

  • Fixed macOS cache on 10.15 when App Identifier Prefix is different from TeamId
  • Remove SHA-1 dependency from production library
  • Fixed SSO extension + MSIT MFA
  • Fixed SSO extension swipe down cancellation case
  • Handle http headers coming from iOS broker when it is either a NSDictionary or NSString
  • Updated readme to include information about Microsoft Enterprise SSO plug-in for Apple devices and shared device scenarios (#881)

[1.1.0] - 2020-03-20

Added

  • iOS 13 SSO Extension support
  • Support ASWebAuthenticationSession on macOS 10.15
  • Track account sign-in and sign-out state
  • Support signOut from device if device is configured as shared through MDM

[1.0.7] - 2020-01-29

Fixed

  • Keyed unarchiver deserialization fix for iOS 11.2
  • [Broker patch] Fixed account lookups and validation with the same email (#827)

[1.0.6] - 2020-01-03

Fixed

  • Set mobile content type for the WKWebView configuration (#810)
  • Better error handling for missing broker query schemes (#811)
  • Enable dogfood Authenticator support by default (#812)
  • Optimiza external account writing logic (#813)

[1.0.5] - 2019-12-13

Fixed

  • Account lookup fix when no refresh tokens present (#799)

[1.0.4] - 2019-11-26

Fixed

  • Fixed external account matching when identifier is not present (#787)

[1.0.3] - 2019-11-15

Added

  • Added default implementation for ADAL legacy persistence

Fixed

  • Fixed error logging when MSAL was logging false positives

[1.0.2] - 2019-10-29

Fixed

  • Make trustedApps in MSALCacheConfig writable to allow apps sharing keychain on macOS
  • Always write to the data protection keychain on macOS 10.15

[1.0.1] - 2019-10-25

Added

  • Support for apps that are present in multiple clouds
  • Better logging when error is created

Fixed

  • Block swipe to dismiss for auth controller
  • Remove arm64e architecture
  • Pass custom keychain group for broker requests

[1.0.0-hotfix2] - 2020-01-27

Fixed

  • [Broker patch] Keyed unarchiver deserialization fix for iOS 11.2

[1.0.0-hotfix1] - 2020-01-21

Fixed

  • [Broker patch] Fixed account lookups and validation with the same email (#827)

[1.0.0] - 2019-09-26

Fixed

  • Return type of the account claims

Updated

  • MSAL version number and availability. MSAL for iOS and macOS is now generally available.

[0.8.0] - 2019-09-20

Updated

  • Improved Readme.md
  • Added library reference
  • Improved threading behavior around main thread checks

[0.7.1] - 2019-09-11

Added

  • Update ACL authorization tag to kSecACLAuthorizationDecrypt for adding trusted applications to keychain items on OSX.

[0.7.0] - 2019-09-09

Added

  • iOS 13 support for ASWebAuthenticationSession
  • Support keychain access groups on macOS 10.15

[0.6.0] - 2019-08-22

Added

  • Enable iOS 13 compatible broker
  • Implement ACL control for macOS keychain

[0.5.0] - 2019-07-30

Updated

  • Added initial macOS support
  • Better resolution of authorities for silent token acquisition
  • Added backward compatibility for legacy account storages
  • Added backward compatibility for ADAL macOS cache

[0.4.3] - 2019-05-24

Updated

  • Updated to newer v2 broker protocol version

[0.4.2] - 2019-05-06

Fixed

  • Applying 0.3.1 hotfix changes to latest 0.4.x release

[0.4.1] - 2019-05-02

Fixed

  • Removed linked frameworks from static library targets

[0.4.0] - 2019-04-25

Added

  • Updated MSAL Public API surface to be more extensible and intuitive
  • Added support for custom B2C domains
  • Improved MSAL error handling

[0.3.4] - 2019-03-07

Fixed

  • Improve logging for token removal scenarios
  • Use ASCII for PKCE code challenge
  • Don't return Access token if ID token/Account are missing

[0.3.3] - 2019-05-29

Updated

  • Ignore cached fields in JSON if they contains "null"

[0.3.2] - 2019-05-24

Updated

  • Updated to newer v2 broker protocol version

[0.3.1] - 2019-05-06

Fixed

  • Better error handling in CBA cancellation flows
  • Don't read corrupted refresh tokens from cache

[0.3.0] - 2019-04-22

Added

  • Added broker support to MSAL iOS SDK

[0.2.3] - 2019-02-12

Fixed

  • Fix issue when authorization code cannot be read due to a dummy fragment in response URL for B2C (#456)

[0.2.2] - 2018-11-05

Fixed

  • Fix warnings in the keychain component

[0.2.1] - 2018-10-29

Added

  • Fix clang analyzer issues.
  • WKWebView drops network connection if device got locked on iOS 12. It is by design and not configurable.
  • Improved schema compatibility with other MSAL/ADAL SDKs
  • Optimize silent requests

[0.2.0] - 2018-09-18

Added

  • Support for different authority aliases
  • Support for sovereign clouds
  • Support for claims challenge
  • Better resiliency in case of server outages

[0.1.4] - 2018-09-12

Added

  • Cache coexistence with older ADAL versions
  • Support for SFAuthenticationSession
  • Support for WKWebView

[0.1.3] - 2018-04-23

Added

  • CocoaPods podspec

[0.1.2] - 2018-01-30

Added

  • GDPR compliance mechanism for MSAL logs and telemetry through PII enabled/disabled flags
  • Sample app in Swift

Corrected

  • Nullability identifiers in some classes

[0.1.1] - 2017-05-10

Changed

  • MSAL for ObjC no longer targets test slice by default (#195)

[0.1.0] - 2017-05-08

Added

  • Initial BUILD Preview Release of MSAL for ObjC!
  • The initial MSAL for ObjC preview only support iOS 9 and later. macOS support will later.
  • Support for native client token acquisition using MSALPublicClientApplication
  • Interactive auth support using SFSafariViewController
  • iOS Keychain token caching
  • Logging via registered callback in MSALLogger
  • Telemetry events via registered callback in MSALTelemetry