Skip to content

#5400 Fixing issue that leads to multiple active access tokens in the cache for non-tenanted oidc authority - #5401

Merged
bgavrilMS merged 2 commits into
AzureAD:mainfrom
andkorsh:bugfix/5400-oidc-token-cache-tenantid
Aug 1, 2025
Merged

#5400 Fixing issue that leads to multiple active access tokens in the cache for non-tenanted oidc authority#5401
bgavrilMS merged 2 commits into
AzureAD:mainfrom
andkorsh:bugfix/5400-oidc-token-cache-tenantid

Conversation

@andkorsh

@andkorsh andkorsh commented Jul 23, 2025

Copy link
Copy Markdown
Contributor

Fixes #5400

Changes proposed in this request
During DeleteAccessTokensWithIntersectingScopes we now allow tenantId comparison to pass when either of the sides of condition is null or empty string.

Testing
When integrated with OpenIdDict, it simplifies testing if access token lifetime is set to a lower value than the default 30 minutes:
.SetAccessTokenLifetime(TimeSpan.FromMinutes(2))

Performance impact
None

Documentation
Just a bugfix, no doc update required.

@andkorsh
andkorsh requested a review from a team as a code owner July 23, 2025 17:39
@gladjohn

gladjohn commented Jul 24, 2025

Copy link
Copy Markdown
Contributor

PR build - https://identitydivision.visualstudio.com/IDDP/_build/results?buildId=1511407

@andkorsh @bgavrilMS
AzureAD#5400 Fixing issue that leads to multiple active access tokens…
5e656b5 
… in the cache for non-tenanted oidc authority
@bgavrilMS
bgavrilMS force-pushed the bugfix/5400-oidc-token-cache-tenantid branch from 482becf to 5e656b5 Compare July 26, 2025 22:50
@bgavrilMS
bgavrilMS enabled auto-merge (squash) August 1, 2025 11:31
@bgavrilMS
bgavrilMS disabled auto-merge August 1, 2025 11:31
@bgavrilMS
bgavrilMS merged commit 53da7c3 into AzureAD:main Aug 1, 2025
2 checks passed
This was referenced Aug 16, 2025
Closed
Merged
Closed
Closed
Closed
Closed
Closed
Merged
Closed
Merged
Closed
Merged
Merged
lilyydu pushed a commit to microsoft/teams-sdk that referenced this pull request Aug 20, 2025
@dependabot
[C#] bump: Bump the development group with 2 updates (#2559)
ce0427f 
#minor 
Updated [Azure.Identity](https://github.com/Azure/azure-sdk-for-net)
from 1.14.2 to 1.15.0.

<details>
<summary>Release notes</summary>

_Sourced from [Azure.Identity's
releases](https://github.com/Azure/azure-sdk-for-net/releases)._

No release notes found for this version range.

Commits viewable in [compare
view](https://github.com/Azure/azure-sdk-for-net/commits).
</details>

Updated
[Microsoft.Identity.Client](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet)
from 4.74.1 to 4.76.0.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.Identity.Client's
releases](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/releases)._

## 4.76.0

## What's Changed
* Removal of `ExperimentalFeatures` flag on `WithMtlsProofOfPossession`
API: by @​gladjohn in
AzureAD/microsoft-authentication-library-for-dotnet#5402
* #​5400 Fixing issue that leads to multiple active access tokens in the
cache for non-tenanted oidc authority by @​andkorsh in
AzureAD/microsoft-authentication-library-for-dotnet#5401
* Add Service Fabric token revocation support by @​gladjohn in
AzureAD/microsoft-authentication-library-for-dotnet#5421
* Update NativeInterop package version to 0.19.4 by @​ashok672 in
AzureAD/microsoft-authentication-library-for-dotnet#5434
* Adding WithExtraBodyParameters api by @​trwalke in
AzureAD/microsoft-authentication-library-for-dotnet#5389
* Enable mTLS Proof‑of‑Possession for Client‑Assertion Delegates by
@​gladjohn in
AzureAD/microsoft-authentication-library-for-dotnet#5409

## New Contributors
* @​andkorsh made their first contribution in
AzureAD/microsoft-authentication-library-for-dotnet#5401

**Full Changelog**:
AzureAD/microsoft-authentication-library-for-dotnet@4.74.1...4.76.0

Commits viewable in [compare
view](AzureAD/microsoft-authentication-library-for-dotnet@4.74.1...4.76.0).
</details>

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This was referenced Aug 25, 2025
Merged
Closed
Closed
This was referenced Sep 8, 2025
Closed
Closed
This was referenced May 20, 2026
Closed
Closed
Closed
Closed
Closed
This was referenced Jun 5, 2026
Closed
Open
Closed
Closed
Closed
Closed
This was referenced Jun 19, 2026
Closed
Closed
Closed
Closed
Closed
Closed
This was referenced Jun 29, 2026
Closed
Closed
Closed
This was referenced Jul 9, 2026
Closed
Closed
Closed
Open
This was referenced Jul 16, 2026
Closed
Closed
Closed
Merged
This was referenced Jul 27, 2026
Closed
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bgavrilMS bgavrilMS bgavrilMS approved these changes
@trwalke trwalke trwalke approved these changes
@gladjohn gladjohn gladjohn approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

[Bug] The cache contains multiple tokens satisfying the requirements

4 participants

@andkorsh @gladjohn @bgavrilMS @trwalke