-
Notifications
You must be signed in to change notification settings - Fork 36
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Nonce redirect changes, Fixes AB#3098972 #2552
Conversation
❌ Work item link check failed. Description does not contain AB#{ID}. Click here to Learn more. |
✅ Work item link check complete. Description contains link AB#3098972 to an Azure Boards work item. |
common/src/main/java/com/microsoft/identity/common/CommonPrtCredentialHolder.kt
Outdated
Show resolved
Hide resolved
activity | ||
) | ||
} | ||
Logger.warn(methodTag, "mPrtCredentialHolder is not initialized!") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should this be an error case and throw?
common/src/main/java/com/microsoft/identity/common/IPrtCredentialHolder.kt
Outdated
Show resolved
Hide resolved
common/src/main/java/com/microsoft/identity/common/IPrtCredentialHolder.kt
Outdated
Show resolved
Hide resolved
.../com/microsoft/identity/common/internal/ui/webview/challengehandlers/NonceRedirectHandler.kt
Show resolved
Hide resolved
.../com/microsoft/identity/common/internal/ui/webview/challengehandlers/NonceRedirectHandler.kt
Show resolved
Hide resolved
.../com/microsoft/identity/common/internal/ui/webview/challengehandlers/NonceRedirectHandler.kt
Outdated
Show resolved
Hide resolved
.../com/microsoft/identity/common/internal/ui/webview/challengehandlers/NonceRedirectHandler.kt
Outdated
Show resolved
Hide resolved
common/src/main/java/com/microsoft/identity/common/IPrtCredentialHolder.kt
Outdated
Show resolved
Hide resolved
common/src/main/java/com/microsoft/identity/common/CommonPrtCredentialHolder.kt
Outdated
Show resolved
Hide resolved
...ava/com/microsoft/identity/common/internal/ui/webview/AzureActiveDirectoryWebViewClient.java
Outdated
Show resolved
Hide resolved
.../com/microsoft/identity/common/internal/ui/webview/challengehandlers/NonceRedirectHandler.kt
Show resolved
Hide resolved
.../com/microsoft/identity/common/internal/ui/webview/challengehandlers/NonceRedirectHandler.kt
Outdated
Show resolved
Hide resolved
.../com/microsoft/identity/common/internal/ui/webview/challengehandlers/NonceRedirectHandler.kt
Outdated
Show resolved
Hide resolved
.../com/microsoft/identity/common/internal/ui/webview/challengehandlers/NonceRedirectHandler.kt
Outdated
Show resolved
Hide resolved
.../com/microsoft/identity/common/internal/ui/webview/challengehandlers/NonceRedirectHandler.kt
Outdated
Show resolved
Hide resolved
common/src/main/java/com/microsoft/identity/common/IPrtCredentialHolder.kt
Outdated
Show resolved
Hide resolved
common/src/main/java/com/microsoft/identity/common/IPrtCredentialHolder.kt
Outdated
Show resolved
Hide resolved
common/src/main/java/com/microsoft/identity/common/IPrtCredentialHolder.kt
Outdated
Show resolved
Hide resolved
.../com/microsoft/identity/common/internal/ui/webview/challengehandlers/NonceRedirectHandler.kt
Outdated
Show resolved
Hide resolved
49b2705
to
c862bd8
Compare
c862bd8
to
4718f68
Compare
...ava/com/microsoft/identity/common/internal/ui/webview/AzureActiveDirectoryWebViewClient.java
Show resolved
Hide resolved
.../com/microsoft/identity/common/internal/ui/webview/challengehandlers/NonceRedirectHandler.kt
Outdated
Show resolved
Hide resolved
common/src/main/java/com/microsoft/identity/common/IRefreshTokenCredentialProvider.kt
Outdated
Show resolved
Hide resolved
.../com/microsoft/identity/common/internal/ui/webview/challengehandlers/NonceRedirectHandler.kt
Show resolved
Hide resolved
common/src/main/java/com/microsoft/identity/common/CommonRefreshTokenCredentialProvider.kt
Outdated
Show resolved
Hide resolved
common/src/main/java/com/microsoft/identity/common/CommonRefreshTokenCredentialProvider.kt
Outdated
Show resolved
Hide resolved
common/src/main/java/com/microsoft/identity/common/CommonRefreshTokenCredentialProvider.kt
Outdated
Show resolved
Hide resolved
.../com/microsoft/identity/common/internal/ui/webview/challengehandlers/NonceRedirectHandler.kt
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
minor nits, LGTM
4718f68
to
a281be5
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What : Server can reject nonce sent in PRT header in requests. In this case, server redirects to a url with sso_nonce provided in the URL. Broker should be able to handle redirect and replay request with updated PRT credential using new nonce.
Fixes AB#3098972
Related broker PR : https://github.com/AzureAD/ad-accounts-for-android/pull/3013/files