New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ADAL may store broker tokens not using preferred cache authority #1394

Open

jasoncoolmax opened this issue Mar 13, 2019 · 0 comments

Labels

Member

jasoncoolmax commented Mar 13, 2019 •

edited

Loading

ADAL could save broker tokens without using preferred cache authority in the following corner case:

ADAL calls broker;
Kill ADAL app;
Finish authentication in broker webview
Tokens are returned back to ADAL app.

It is because in step 4, ADAL doesn't have the authority cache at hand when it receives the response from broker.

jasoncoolmax added the bug label

oldalton added the internal label

oldalton removed the bug label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment