MSAL Python 1.2.0

• New nonce parameter is provided in both get_authorization_request_url(..., nonce=...) and acquire_token_by_authorization_code(..., nonce=...) method, so that you can use them to mitigate replay attacks, per OIDC specs. (#128, #173).

MSAL Python 1.1.0

• New acquire_token_silent_with_error(...) method to expose conditional access error classifications (#143, closes #57).
• App developers can opt in to provide their app's name and version for Microsoft Telemetry, so that we can understand your usage pattern and serve you better. (#136 closes #130)
• Internally,
  • Collect anonymous telemetry data to help us improve MSAL Python (#103)
  • Test cases cover ADFS 2019 on-premise scenarios (#142, closes #132)
  • Switched to our latest lab apis for better test infrastructure (#108, #133, #134, #135)

MSAL Python 1.0.0

• The major version number is bumped to have a 1.0.0 release. This indicates that the API surface in MSAL Python 1.0.0 is now stable and production ready. You may learn more about Versioning from Semantic Versioning FAQ.
• There is no actual change between the previous 0.9.0 release and this release.

MSAL Python 0.9.0

• Note: This 0.9.0 release doubles as a release candidate for an MSAL Python 1.0.0 which will be coming very soon.

• New feature: The B2C support we introduced since MSAL Python 0.8.0 now becomes easier to use (#114), and its usage is now fully documented in this wiki page.

• New feature: The get_authorization_request_url() API supports a prompt parameter. (#106)

• Bugfix: The force_refresh parameter in acquire_token_silent() is now wired up properly. You don't normally need this parameter though, MSAL will refresh when needed. (Closes #113)

• Others: Starting from this version, our PyPI release will use universal wheel format (This fix #119 will close #115.)

• Samples improvements (#112, #116, #117, #118 )

MSAL Python 0.8.0

• New feature: The infrastructure supports B2C (#104). We will further add a dedicated helper to our API surface in next release.
• New feature: get_authorization_request_url() API supports the response_type parameter, so that your web app could use it to acquire ID Token only (#105)
• Internal: Let our tests run on Python 3.8 (#107)
• Sample: Recently Microsoft Identity Platform supports Device Flow on MSA accounts. All previous versions of MSAL Python would just work. We updated our sample to demonstrate it. (#91)

MSAL Python 0.7.0

• New feature: Support On-Behalf-Of flow (#53, #92)
• We now have a new Web App sample at https://github.com/Azure-Samples/ms-identity-python-webapp

MSAL Python 0.6.1

• Bugfix: We were using base64 to decode id tokens. We should use urlsafe_base64 instead. (#84)

MSAL Python 0.6.0

UPDATE at 2019-8-13: There was a bug affecting all previous MSAL Python versions until it is now fixed in MSAL Python 0.6.1. We recommend customer to upgrade to MSAL Python 0.6.1 or above.

• MSAL can talk directly to an ADFS 2019 authority. One of the scenarios this highlights is Azure Stack support. (#54, #77)
• Minor changes for UX improvement in device code flow sample

MSAL Python 0.5.1

UPDATE at 2019-8-13: There was a bug affecting all previous MSAL Python versions until it is now fixed in MSAL Python 0.6.1. We recommend customer to upgrade to MSAL Python 0.6.1 or above.

• This release is functionally identical to 0.5.0. We are just fixing a packaging issue (#74) which would potentially cause some installation difficulty on a certain platform(s). If MSAL Python 0.5.0 is already working fine for you, you do not need to upgrade.

MSAL Python 0.5.0

UPDATE at 2019-8-13: There was a bug affecting all previous MSAL Python versions until it is now fixed in MSAL Python 0.6.1. We recommend customer to upgrade to MSAL Python 0.6.1 or above.

• Supports SubjectName/Issuer (SNI) authentication. (#60, #71)
• Supports customizable client claims for confidential client, by a new client_claims parameter documented here. (#67, #68)
• Other minor patch(es). (#69)