Skip to content

Distributed cache solution for managed identity #623

@DidunAyodeji

Description

@DidunAyodeji

Since there is no client id in case of system assigned managed identity, the app token cache that we use to cache managed identity tokens can fail for a scenario where distributed cache is used for 2 different resources. Due to same cache key for both the resources, the tokens can be used interchangeably and this is a possible security concern.

see #615 for more details

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions