-
Notifications
You must be signed in to change notification settings - Fork 235
Closed
Labels
Milestone
Description
Is your feature request related to a problem? Please describe.
MSAL needs to provide a mechanism to discourage customers from performing FMI scenarios with a distributed cache as it can lead to security issues.
See how-to-use-fmi-tokens.md - Repos for token caching issues.
Describe the solution you'd like
MSAL can provide a signal in the token cache notification args which are available to higher level apis to detect when customers have configured token cache serialization for IDistributedCache
when the FMI node client id :urn:microsoft:identity:fmi
is configured.
IdWeb throws an exception when it detects NoDistributedCacheUseReason
from the TokenCacheNotificationArgs
is not null and the distributed cache is configured.