github.com/AzureAD/microsoft-authentication-library-for-go

What's Changed

• ci: stage MSAL Go pipeline + add Managed Identity IMDS & Azure Arc E2E tests by Gladwin Johnson VR (@gladjohn) in #641
• Fix intermittent "context canceled" token failures in managed identity retry() by Nilesh Choudhary (@4gust) in #642
• Add user-assigned managed identity (UAMI) support for Azure Arc (MSAL.NET #6128 parity) by Gladwin Johnson VR (@gladjohn) in #644
• Reject legacy RFC 1423 encrypted PEM in CertFromPEM by Robbie-Microsoft in #645
• Harden regional authority validation by Nilesh Choudhary (@4gust) in #650
• fix(managedidentity): pin Service Fabric TLS certificate by Nilesh Choudhary (@4gust) in #656
• Fix ID token credential type casing by Nilesh Choudhary (@4gust) in #657
• Fix WS-Trust endpoint selection helper by Nilesh Choudhary (@4gust) in #655
• Prepare MSAL Go 1.9.0 release by Nilesh Choudhary (@4gust) in #658

Full Changelog: v1.8.0...v1.9.0

What's Changed

• Recover from panics in json.Unmarshal to prevent token-cache crashes (fixes #579) by Nilesh Choudhary (@4gust) in #614
• fix(base.go): empty partition key causing external cache miss by Matteo Calabrò (@MatteoCalabro-TomTom) in #615
• Add User Federated Identity Credential (user_fic) grant type support by Avery-Dunn in #619

New Contributors

• Matteo Calabrò (@MatteoCalabro-TomTom) made their first contribution in #615

Full Changelog: v1.7.2...1.8.0

What's Changed

• Adjust constants used in FMI tests by Avery-Dunn in #608
• Update version to 1.7.1 by Avery-Dunn in #607
• Add MSAL client metadata headers to IMDS managed identity requests by @Copilot in #611
• Disable gzip compression #613 by Nilesh Choudhary (@4gust) in #616
• Update version.go by Nilesh Choudhary (@4gust) in #617

New Contributors

• @Copilot made their first contribution in #611

Full Changelog: v1.7.1...v1.7.2

What's Changed

• Add FMI (Federated Managed Identity) Design Specification for MSAL Go by Nilesh Choudhary (@4gust) in #583
• Fix bug in refresh token partition check by Avery-Dunn in #606
• Improve instance discovery resiliency and sovereign cloud support by Avery-Dunn in #604

Full Changelog: v1.7.0...v1.7.1

What's Changed

• Add WithPrompt option for AuthCodeURL by Przemek Malolepszy (@szogoon) in #585
• Use form_post response mode for interactive authentication by Ashok Kumar Ramakrishnan (@ashok672) in #596

New Contributors

• Przemek Malolepszy (@szogoon) made their first contribution in #585
• Ashok Kumar Ramakrishnan (@ashok672) made their first contribution in #596

Full Changelog: v1.6.0...v1.7.0

What's Changed

• Deprecate ROPC flow by Ugonna Akali (@Ugonnaak1) in #584
• Added a cache lookup for AcquireTokenByCredential by Nilesh Choudhary (@4gust) in #590
• Fix panic in AcquireTokenSilent for public clients due to nil Credential by Nilesh Choudhary (@4gust) in #581
• Adding support for FMI (Federated Managed Identity) by Nilesh Choudhary (@4gust) in #586
• Adjust issuer validation to handle cases where instance discovery is not performed by Avery-Dunn in #591

New Contributors

• Ugonna Akali (@Ugonnaak1) made their first contribution in #584

Full Changelog: v1.5.0...v1.6.0

What's Changed

• Bump github.com/golang-jwt/jwt/v5 from 5.0.0 to 5.2.2 by Dependabot (@dependabot)[bot] in #563
• Added a FIC test by Nilesh Choudhary (@4gust) in #557
• Fix CodeQL warning 'Cross-site scripting vulnerability due to user-provided value by fengga in #566
• fix: support both login.partner.microsoftonline.cn and login.chinaclo… by Achiket Kumar (@Achiket123) in #575
• Add validation for issuer returned by OIDC endpoint by Avery-Dunn in #576
• #572 - Update spelling of client by Chris Gibson (@equalsgibson) in #573

New Contributors

• Dependabot (@dependabot)[bot] made their first contribution in #563
• fengga made their first contribution in #566
• Achiket Kumar (@Achiket123) made their first contribution in #575
• Avery-Dunn made their first contribution in #576
• Chris Gibson (@equalsgibson) made their first contribution in #573

Full Changelog: v1.4.2...v1.5.0

What's Changed

• Support for refresh_in for ConfidentialClient by Nilesh Choudhary (@4gust) in #542
• Update Unit tests by Nilesh Choudhary (@4gust) in #560
• Exposing necessary types from each client by Nilesh Choudhary (@4gust) in #561
• 4gust/cca 256sha support by Nilesh Choudhary (@4gust) in #562
• Updated the version info by Nilesh Choudhary (@4gust) in #564

Full Changelog: v1.4.1...v1.4.2

What's Changed

• Fixing // #nosec G101 issue on MSI by Nilesh Choudhary (@4gust) in #554
• Unmarshal device code verification URLs by Charles Lowell (@chlowell) in #556

Full Changelog: v1.4.0...v1.4.1