Microsoft.Identity.Web needs upper version bound to prevent incompatible Microsoft.Identity.Abstractions version

[DavidParks8]

Microsoft.Identity.Web Library

Microsoft.Identity.Web

Microsoft.Identity.Web version

3.0.1

Web app

Not Applicable

Web API

Protected web APIs call downstream web APIs

Token cache serialization

Distributed caches

Description

Microsoft.Identity.Abstractions v7 is incompatible with Microsoft.Identity.Web v3.0.1. There needs to be an upper bound on the required version of Microsoft.Identity.Abstractions specified in Microsoft.Identity.Web such that incompatible versions are prevented from being easily installed.

Reproduction steps

Check the stacktrace.

Error message

System.TypeLoadException
HResult=0x80131522
Message=Method 'CallApiForUserAsync' in type 'Microsoft.Identity.Web.DownstreamApi' from assembly 'Microsoft.Identity.Web.DownstreamApi, Version=3.0.1.0, Culture=neutral, PublicKeyToken=0a613f4dd989e8ae' does not have an implementation.
Source=Microsoft.Identity.Web.DownstreamApi
StackTrace:
at Microsoft.Identity.Web.DownstreamApiExtensions.RegisterDownstreamApi(IServiceCollection services)
at Microsoft.Identity.Web.DownstreamApiExtensions.AddDownstreamApis(IServiceCollection services, IConfigurationSection configurationSection)

Id Web logs

No response

Relevant code snippets

Repro shared offline

Regression

No response

Expected behavior

only v6 of Microsoft.Identity.Abstractions should be allowed to install.