-
Notifications
You must be signed in to change notification settings - Fork 2.7k
msal-react and the PKCE auth flow are incompatible with AzureAD App Proxy #3420
Copy link
Copy link
Open
Labels
aad-serviceRelated to the AAD / MSA serviceRelated to the AAD / MSA servicebugA problem that needs to be fixed for the feature to function as intended.A problem that needs to be fixed for the feature to function as intended.compatibilityRelated to compatibility with specific frameworks, environments, browsers, etc.Related to compatibility with specific frameworks, environments, browsers, etc.externalWhen the issue is real, but nothing can be done in the library itselfWhen the issue is real, but nothing can be done in the library itselfknown-issueIssue is already known and is either being investigated or is already fixed.Issue is already known and is either being investigated or is already fixed.msal-browserRelated to msal-browser packageRelated to msal-browser package
Metadata
Metadata
Assignees
Labels
aad-serviceRelated to the AAD / MSA serviceRelated to the AAD / MSA servicebugA problem that needs to be fixed for the feature to function as intended.A problem that needs to be fixed for the feature to function as intended.compatibilityRelated to compatibility with specific frameworks, environments, browsers, etc.Related to compatibility with specific frameworks, environments, browsers, etc.externalWhen the issue is real, but nothing can be done in the library itselfWhen the issue is real, but nothing can be done in the library itselfknown-issueIssue is already known and is either being investigated or is already fixed.Issue is already known and is either being investigated or is already fixed.msal-browserRelated to msal-browser packageRelated to msal-browser package
Core Library
@azure/msal or msal
Wrapper Library
@azure/msal-react
Description
Work with the AzureAD App Proxy team to ensure the new PKCE/SPA flow works with AzureAD App Proxy. Currently these are not compatible because of the way App Proxy works and modifies authentication methods.
Source
External (Customer)