[Bug] Two Windows WAM tests will fail if NativeInterop > 0.18.1

[fengga]

Library version used

4.72.1

.NET version

net8.0

Scenario

PublicClient - desktop app

Is this a new or an existing app?

None

Issue description and reproduction steps

If use NativeInterop > 0.18.1, like 0.18.2 or 0.19.1

microsoft-authentication-library-for-dotnet/Directory.Packages.props

Line 5 in 0f28069

<MSALRuntimeNativeInteropVersion>0.18.1</MSALRuntimeNativeInteropVersion>

Open LibsAndSamples.sln and run NET Core tests:
WamUsernamePasswordPopTokenEnforcedWithCaOnInValidResourceAsync

fails with error:

Error Code: 3399549011
Error Message: ApiContractViolation
WAM Error Message: Account and credential in the same request. Not supported.
Internal Error Code: 557973642

The failure is inside MSALRuntime with tag_7q6ck: https://office.visualstudio.com/OneAuth/_git/OneAuth?path=/msal/source/windows/broker/AADTokenRequest.cpp&version=GBmaster&_a=contents&line=139&lineStyle=plain&lineEnd=139&lineStartColumn=1&lineEndColumn=51

Error inside WAM:
ERROR_ADAL_ACCOUNT_AND_CREDENTIAL | Account and credential in the same request. Not supported.

Also fails in the pipeline with the same errors:

https://identitydivision.visualstudio.com/IDDP/_build/results?buildId=1493308&view=logs&j=b518b04f-6c84-5938-67f2-8f2b5bcbaf6d&t=f2a8f620-7cb1-5cbf-b47f-4878452b8c1e&l=566

https://identitydivision.visualstudio.com/IDDP/_build/results?buildId=1493308&view=logs&j=b518b04f-6c84-5938-67f2-8f2b5bcbaf6d&t=f2a8f620-7cb1-5cbf-b47f-4878452b8c1e&l=590

Relevant code snippets

Expected behavior

No response

Identity provider

Microsoft Entra ID (Work and School accounts and Personal Microsoft accounts)

Regression

NativeInterop version 0.18.1 works

Solution and workarounds

No response

[github-actions]

Here are some similar issues that might help you. Please check if they can solve your problem.

• [Bug] ApiContractViolation. Token response failed because declined scopes are present #5232

Powered by issue-sentinel

[fengga]

The issue is introduced in: https://office.visualstudio.com/OneAuth/_git/OneAuth/pullrequest/4182067?path=%2Fmsal%2Fsource%2Fxplat%2Fapi_impl%2FAuthParametersInternalHelper.cpp
After the PR above, we begin to pass login_hint to WAM. In some cases, it will trigger the error ERROR_ADAL_ACCOUNT_AND_CREDENTIAL in WAM.

A fix PR: https://office.visualstudio.com/OneAuth/_git/OneAuth/pullrequest/4177689 just stop passing login_hint for WAM ROPC flows. PR is merged, and the fix is available in NativeInterop 0.19.2