Skip to content

Conversation

@p3dr0rv
Copy link
Contributor

@p3dr0rv p3dr0rv commented Feb 10, 2025

No description provided.

p3dr0rv and others added 8 commits February 3, 2025 15:40
Issue : Some specific device models do not like the purpose
"PURPOSE_WRAP_KEY" to be passed while doing a keypair generation.
Root cause : Changes made in this PR
https://github.com/AzureAD/microsoft-authentication-library-common-for-android/pull/2558/files
IcM :
https://portal.microsofticm.com/imp/v5/incidents/details/592800555/summary
Fix : 
1. Added fallback mechanism to skip using wrap_key purpose when the
SecureKeyImportUnavailableException occurs.
2. If the fallback mentioned in step 1 fails, we fallback to legacy
keygen spec method.
3. Added telemetry to capture which method was finally successful and
also the time taken to generate the keypair
4. Also kept my changes behind a flight to turn it off in case of any
failures


Manually tested below steps
1. Signed in with an AAD account with the flight for using the latest
KeyGenParameterSpec as ON in MsalTestApp with BrokerHost as the broker
5. Tried  ATS ---> Succeeds
6. Tried getBrokerAccounts API from BrokerHost app ---> Succeeds
7. Did a device registration -- Succeeds

-----------------------------------------------------------------------------
8. Assuming some issue happened, I turned off the flight
9. Tried  ATS ---> Succeeds
10. Tried ATI with same UPN --> Succeeds
11. Tried getBrokerAccounts API from BrokerHost app ---> Succeeds
12. Tried to get WPJ entries --> Gets them correctly

Fixes
[AB#3146656](https://identitydivision.visualstudio.com/fac9d424-53d2-45c0-91b5-ef6ba7a6bf26/_workitems/edit/3146656)
@p3dr0rv p3dr0rv requested a review from a team as a code owner February 10, 2025 19:30
@github-actions
Copy link

❌ Work item link check failed. Description does not contain AB#{ID}.

Click here to Learn more.

@p3dr0rv p3dr0rv merged commit 2589568 into dev Feb 10, 2025
30 of 33 checks passed
@p3dr0rv p3dr0rv deleted the pedroro/release/20.0.0 branch February 10, 2025 23:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants