Authenticate marketplace API requests via RFC 9728 PRM negotiation - #2

Closed

mcumming wants to merge 8 commits into

mcumming-entra-id-vss-marketplace-reviewfrom

entra-marketplace-pr2-prm-auth

Commits on Jul 14, 2026

Add RFC 9728 Protected Resource Metadata discovery for the marketplace

mcumming
and
Copilot
committed
1047d20
Negotiate a resource-scoped token on a gated Microsoft service index

mcumming
and
Copilot
committed
cfaa026
Attach the negotiated marketplace token to gallery API requests

mcumming
and
Copilot
committed
c9fcc37
Thread the negotiated marketplace token to the shared process

mcumming
and
Copilot
committed
516783f
Attach the negotiated marketplace token to extension resource requests

mcumming
and
Copilot
committed
c93ef87
Acquire the resource-scoped token on interactive marketplace sign-in

mcumming
and
Copilot
committed
8578eba
Check marketplace eligibility only on first sign-in or account change

mcumming
and
Copilot
committed
1249328
Downgrade the expected negotiation 401 from error to trace

mcumming
and
Copilot
committed
d708ccf