v1.4.0

Release Summary: Add Managed Identity Support

Overview

This Release introduces Managed Identity support to the Microsoft Authentication Library for Go through a new client. The new client supports multiple sources for managed identities, including:

• IMDS
• Azure Arc
• Service Fabric
• App Service
• Azure Machine Learning
• Cloud Shell

The client can handle both System Assigned Managed Identities and User Assigned Managed Identities.
For user-assigned identities, you can specify:

• Client ID
• Resource ID
• Object ID

Key Changes

• New Managed Identity Client: Added a new client to handle managed identity authentication.
• Multiple Sources Support: The client supports various managed identity sources, enhancing flexibility and usability.
• Tests: Comprehensive tests have been added to ensure the reliability and correctness of the new functionality.
• Documentation: Updated documentation to include details on the new managed identity client and usage instructions.

Code Sample

Here's a basic example of how to use the new managed identity client to acquire a token:

package main

import (
    "context"
    "fmt"
    "github.com/AzureAD/microsoft-authentication-library-for-go/msal"
)

func main() {
	miSystemAssigned, err := mi.New(mi.SystemAssigned())
	if err != nil {
		log.Fatal(err)
	}
	result, err := miSystemAssigned.AcquireToken(context.TODO(), "https://management.azure.com")
	if err != nil {
		log.Fatal(err)
	}
	fmt.Println("token expire at : ", result.ExpiresOn)
}

v1.3.3

What's Changed

• fix: username password flow by @mohanjith in #536
• Fix Bug: Prevent Empty Region in WithAzureRegion from Overriding MSAL_FORCE_REGION by @4gust in #545

New Contributors

• @mohanjith made their first contribution in #536

Full Changelog: v1.3.2...v1.3.3

v1.3.2

Re-release v1.3.2, which was accidentally tagged as v.1.3.2

What's Changed

• Revert WithTenantID("adfs") regression by @chlowell in #529
• Create release.md by @bgavrilMS in #530

Full Changelog: v1.3.1...v1.3.2

v1.3.1

What's Changed

• Fix invalid authority uri by @bgavrilMS in #526
• If authority segments <3, throw by @bgavrilMS in #528
• dSTS support

Full Changelog: v1.2.3...v1.3.1

v1.2.3

What's Changed

• Fix samples link by @epelc in #483
• apps/internal/local: html escape error desc query string by @flavianmissi in #465
• Always close the IMDS response body by @qmuntal in #478
• Update authority.go by @bgavrilMS in #493
• Added a new variable in AuthRepsonse "IsFromCache" by @4gust in #498
• Replace MethodByName with type assertions by @chlowell in #510
• Wrap ResolveEndpoints error by @kgeckhart in #515
• Added Region auto enable by @4gust in #523

New Contributors

• @epelc made their first contribution in #483
• @pmaytak made their first contribution in #481
• @flavianmissi made their first contribution in #465
• @qmuntal made their first contribution in #478
• @kgeckhart made their first contribution in #515

Full Changelog: v1.2.2...v1.2.3

MSAL Go 1.2.2

Adds support for using the AuthScheme extensibility point for ROPC Support authnscheme in AcquireByUsernamePassword

MSAL Go 1.2.1

Bug fixes

ADFS token caching fix - #459
Token cache schema upgrade - #454

MSAL Go 1.2.0

Add an extensibility point for Azure Arc to request and cache Access Token of type POP #443

MSAL Go 1.1.1

Bug Fixes

Fix AcquireTokenSilent for ADFS users #446

MSAL Go 1.1.0

New Features

Allow public client app developers to take control of opening the browser #422

Bug fixes

Normalize token cache keys #425
Require an account in public client silent auth #426
Bump dependency github.com/golang-jwt/jwt/ to v5 #414