All pull requests

Pull requests

• Don't cache tokens rejected by the auth code nonce or max_age check

  #979·rumaisaaaaa263 opened Oct 30, 2026·

  ·
  2

• Scope OIDC issuer fallback eligibility

  #978·Nilesh Choudhary (4gust) opened Oct 29, 2026Contributor·

  ·
  7

• Keep ROPC password hashes out of the persisted http_cache

  #977·rumaisaaaaa263 opened Oct 28, 2026·

  ·
  2

• Complete mTLS E2E parity and combined transport integration

  #976·Robbie-Microsoft opened Oct 23, 2026Contributor·

  ·
  20

• Support custom certificate-aware mTLS HTTP pipelines

  #974·Robbie-Microsoft opened Oct 23, 2026Contributor·

  ·
  7

• Fix two typos in oauth2cli/oauth2.py

  #972·Ernest (its-ernest) opened Oct 18, 2026·

  ·
  2

• Bump the github-actions group across 1 directory with 3 updates

  dependenciesgithub_actions
  #969·dependabot[bot] opened Sep 24, 2026Bot·

  ·
  3

• docs: say that verify, proxies and timeout do not apply to a custom http_client

  #961·Max Azatian (HardMax71) opened Sep 10, 2026·

  ·

  · 1.40.0
  1

  1

• Retry the token endpoint's POST on a read error

  #958·Max Azatian (HardMax71) opened Sep 4, 2026·

  ·

  · 1.40.0
  1

  2

• Add SNI certificate support over mTLS (Bearer-over-mTLS)

  #947·Robbie-Microsoft opened Jul 31, 2026Contributor·

  ·
  15

• Add FIC two-leg exchange over mTLS Proof-of-Possession

  #939·Robbie-Microsoft opened Jul 6, 2026Contributor·

  ·
  14

• SN/I certificate over mTLS Proof-of-Possession

  #938·Robbie-Microsoft opened Jul 1, 2026Contributor·

  ·
  130

• docs: Guidance for higher-level SDKs to consume MSAL mTLS PoP

  #933·Gladwin Johnson VR (gladjohn) opened Jun 21, 2026Contributor·

  ·
  13

• POC 2: MSI v2 mTLS PoP — WindowsCertificate + SchannelSession

  #931·Gladwin Johnson VR (gladjohn) opened Jun 20, 2026Contributor·

  ·
  21

• Support ISO8601-ish formats for expires_on in Managed Identity

  #900·gladjohn with CopilotAI opened Apr 8, 2026·

  ·
  1

  9

  

• POC - MSI v2: mTLS Proof-of-Possession with KeyGuard Attestation

  #897·Gladwin Johnson VR (gladjohn) opened Apr 7, 2026Contributor·

  ·
  34

• Add SHA256 certificate thumbprint support with authority-based selection

  #873·bgavrilMS with CopilotAI opened Feb 10, 2026·

  ·
  1

  16