azure-keyvault-securitydomain

Releases

1. ▸▾1.0.0b42 Oct 2026pre-release

   Reject request URLs containing backslashes in the authority before authentication.

   1.0.0b4 (2026-10-02)

   Bugs Fixed

   • Reject request URLs containing backslashes in the authority before authentication.
   • Verify cached authentication challenges before token use and clear rejected or malformed challenges without removing newer entries installed by concurrent requests.
   • Preserve redirect header updates and cleanup when restoring request bodies during authentication.
   • Remove stale request authorization and clear the observed cached challenge when a 401 response omits WWW-Authenticate, without retrying authentication.

   Open source →

   Additional notes

   Features Added

   Breaking Changes

   Bugs Fixed

   • Fixed an issue where cached authentication challenges could bypass challenge resource verification.
   • Preserve newer cached authentication challenges installed by concurrent requests when an older request fails. Failed requests now clear only the cache entry they observed or accepted.
   • Hardened challenge cache reuse as a follow-up to #48710. Cached challenges are now verified before token use, and stale entries are cleared when challenge parsing or resource verification fails. Request replay and existing CAE scope/tenant precedence are preserved when concurrent requests invalidate the shared cache.
   • Preserved redirect header cleanup and header updates when restoring request bodies during authentication.
   • Reject request URLs containing backslashes in the authority before authentication.
   • Clear the request's cached challenge when a 401 response omits WWW-Authenticate, returning that response without an authentication retry. If no newer challenge remains, the next request rediscovers it, which can add an unauthenticated request even when resource verification is disabled.

   Other Changes

• azure-corePyPIMicrosoft Azure Core Library for Python
• azure-identityPyPIMicrosoft Azure Identity Library for Python
• azure-storage-blobPyPIMicrosoft Azure Blob Storage Client Library for Python
• azure-keyvault-secretsPyPIMicrosoft Corporation Key Vault Secrets Client Library for Python
• azure-commonPyPIMicrosoft Azure Client Library for Python (Common)