Cherry-pick PR #1552: ByPass RedirectUrlValidation for Native Edge Browser SSO flow to release/1.14.0 #1556
+0
−0
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR creates a new branch
release/1.14.0-with-pr1552from the 1.14.0 release tag and cherry-picks the changes from PR #1552 to enable bypassing redirect URL validation for native Edge Browser SSO flows.Background
PR #1552 was originally merged into the
devbranch but was needed for the 1.14.0 release to unblock E2E testing of the native Browser SSO Extension flow on Edge using built-in native DOM APIs. The Broker expects apps to use the redirect URL formatmsauth.://auth, however MSALJS apps that trigger the native Browser Core SSO Extension flow do not need to follow this format, so redirect URL validation should be bypassed in these scenarios.Changes Made
The following changes from PR #1552 have been successfully cherry-picked:
bypassRedirectURIValidationproperty toMSIDRequestParameters.hwith comprehensive documentation explaining its usageMSIDBrokerOperationTokenRequest.hMSIDBrokerOperationTokenRequest.mto pass the flag through the request pipelineFiles Modified
IdentityCore/src/parameters/MSIDRequestParameters.h- Added property with documentationIdentityCore/src/broker_operation/request/token_request/MSIDBrokerOperationTokenRequest.h- Added property declarationIdentityCore/src/broker_operation/request/token_request/MSIDBrokerOperationTokenRequest.m- Added property assignmentTesting
This change maintains backward compatibility while enabling the necessary flexibility for Edge Browser SSO scenarios in the 1.14.0 release line.
✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.