Merge pull request #2125 from AzureAD/release/1.3.2

April Release/1.3.2

Author: antonioalwan

CHANGELOG.md

@@ -1,7 +1,17 @@
+## [1.3.2]
+* Add forceRefresh param to ignore AT in cache and request a new AT.
+
 ## [1.3.1]
 * Preferred auth method added to device information, returned from broker
 
 ## [1.3.0]
+* Added Native Auth feature to interact with the Microsoft Entra ID services
+
+## [1.2.24]
+* Fix pkey auth after server side removal of registration to use isDeviceRegistered flag from ssoContext.
+
+## [1.2.23]
+* Fix pkey auth after server side removal of registration
 
 ## [1.2.22]
 * Add privacy manifest (#1984)

MSAL.podspec

@@ -1,6 +1,6 @@
 Pod::Spec.new do |s|
   s.name         = "MSAL"
-  s.version      = "1.3.1"
+  s.version      = "1.3.2"
   s.summary      = "Microsoft Authentication Library (MSAL) for iOS"
   s.description  = <<-DESC
                    The MSAL library for iOS gives your app the ability to begin using the Microsoft Cloud by supporting Microsoft Azure Active Directory and Microsoft Accounts in a converged experience using industry standard OAuth2 and OpenID Connect. The library also supports Microsoft Azure B2C for those using our hosted identity management service.
@@ -20,7 +20,7 @@ Pod::Spec.new do |s|
     :tag => s.version.to_s,
     :submodules => true
   }
-  
+  s.resource_bundles = {"MSAL" => ["MSAL/PrivacyInfo.xcprivacy"]}
   s.default_subspecs ='app-lib'
 
   s.prefix_header_file = "MSAL/src/MSAL.pch"

MSAL/IdentityCore

@@ -15,7 +15,7 @@
 	<key>CFBundlePackageType</key>
 	<string>FMWK</string>
 	<key>CFBundleShortVersionString</key>
-	<string>1.3.1</string>
+	<string>1.3.2</string>
 	<key>CFBundleVersion</key>
 	<string>$(CURRENT_PROJECT_VERSION)</string>
 	<key>NSPrincipalClass</key>

MSAL/resources/ios/Info.plist

@@ -15,7 +15,7 @@
 	<key>CFBundlePackageType</key>
 	<string>FMWK</string>
 	<key>CFBundleShortVersionString</key>
-	<string>1.3.1</string>
+	<string>1.3.2</string>
 	<key>CFBundleVersion</key>
 	<string>$(CURRENT_PROJECT_VERSION)</string>
 	<key>NSHumanReadableCopyright</key>

MSAL/resources/mac/Info.plist

@@ -873,8 +873,9 @@ - (void)acquireTokenSilentWithParameters:(MSALSilentTokenParameters *)parameters
     msidParams.currentRequestTelemetry.schemaVersion = HTTP_REQUEST_TELEMETRY_SCHEMA_VERSION;
     msidParams.currentRequestTelemetry.apiId = [msidParams.telemetryApiId integerValue];
     msidParams.currentRequestTelemetry.tokenCacheRefreshType = parameters.forceRefresh ? TokenCacheRefreshTypeForceRefresh : TokenCacheRefreshTypeNoCacheLookupInvolved;
-    msidParams.allowUsingLocalCachedRtWhenSsoExtFailed = parameters.allowUsingLocalCachedRtWhenSsoExtFailed;
-     
+    msidParams.allowUsingLocalCachedRtWhenSsoExtFailed = parameters.allowUsingLocalCachedRtWhenSsoExtFailed;    
+    msidParams.forceRefresh = parameters.forceRefresh;
+    
     // Nested auth protocol
     msidParams.nestedAuthBrokerClientId = self.internalConfig.nestedAuthBrokerClientId;
     msidParams.nestedAuthBrokerRedirectUri = self.internalConfig.nestedAuthBrokerRedirectUri;

MSAL/src/MSALPublicClientApplication.m

@@ -27,7 +27,7 @@
 
 #define MSAL_VER_HIGH       1
 #define MSAL_VER_LOW        3
-#define MSAL_VER_PATCH      1
+#define MSAL_VER_PATCH      2
 
 #define STR_HELPER(x) #x
 #define STR(x) STR_HELPER(x)

MSAL/src/MSAL_Internal.h

@@ -420,7 +420,7 @@
                                 representing the TenantID property of the directory)
  @param  claimsRequest          The claims parameter that needs to be sent to token endpoint. When claims
                                 is passed, access token will be skipped and refresh token will be tried.
- @param  forceRefresh           Ignore any existing access token in the cache and force MSAL to
+ @param  forceRefresh           Ignore any existing access token in the cache and force MSAL/Broker to
                                 get a new access token from the service.
  @param  correlationId          UUID to correlate this request with the server
  @param  completionBlock        The completion block that will be called when the authentication

MSAL/src/public/MSALPublicClientApplication.h

@@ -22,6 +22,7 @@
 // THE SOFTWARE.
 
 #import "MSALADFSBaseUITest.h"
+#import "XCUIElement+CrossPlat.h"
 
 @implementation MSALADFSBaseUITest
 
@@ -46,7 +47,8 @@ - (NSString *)runSharedADFSInteractiveLoginWithRequest:(MSIDAutomationTestReques
 
     sleep(1);
     [self aadEnterPassword:self.testApp];
-    [self acceptMSSTSConsentIfNecessary:@"Accept" embeddedWebView:request.usesEmbeddedWebView];
+    [self dismissRememberPassword];
+    [self acceptMSSTSConsentIfNecessary:@"Continue" embeddedWebView:request.usesEmbeddedWebView];
 
     if (!request.usesEmbeddedWebView)
     {
@@ -72,4 +74,13 @@ - (void)enterADFSPassword
     [passwordTextField typeText:[NSString stringWithFormat:@"%@\n", self.primaryAccount.password]];
 }
 
+- (void)dismissRememberPassword
+{
+    if ([self.testApp.scrollViews.otherElements.buttons[@"Not Now"] waitForExistenceWithTimeout:2.0])
+    {
+        XCUIElement *notNow = self.testApp.scrollViews.otherElements.buttons[@"Not Now"];
+        [notNow msidTap];
+    }
+}
+
 @end

MSAL/test/automation/tests/MSALADFSBaseUITest.m

@@ -167,7 +167,7 @@ - (void)acceptConsentIfNecessary:(XCUIElement *)elementToCheck
     int i = 0;
 
     while (i < 20) {
-        
+        sleep(1);
         // If consent button found, tap it and return
         if (elementToCheck.exists)
         {