Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Authorization Code Flow for Single Page Applications: Silent Flow and Logout #1208

Merged

Conversation

pkanher617
Copy link
Contributor

This PR adds the silent flow and logout to the library. The implementation of ADAL SSO and other SSO features is included in a later PR.

This PR also enables CSP in our sample applications. This improves the security of our samples, and should be included in documentation moving forward.

@jasonnutter
Copy link
Contributor

General comment: seems like these could be separate PRs, and theres seemingly other unrelated scope creep (e.g. validation in redirect methods).

lib/msal-browser/src/app/PublicClientApplication.ts Outdated Show resolved Hide resolved
lib/msal-browser/src/app/PublicClientApplication.ts Outdated Show resolved Hide resolved
lib/msal-common/src/app/module/AuthorizationCodeModule.ts Outdated Show resolved Hide resolved
lib/msal-common/src/app/module/AuthorizationCodeModule.ts Outdated Show resolved Hide resolved
lib/msal-common/src/app/module/AuthorizationCodeModule.ts Outdated Show resolved Hide resolved
lib/msal-common/src/auth/ScopeSet.ts Show resolved Hide resolved
lib/msal-common/src/server/ServerTokenRequestParameters.ts Outdated Show resolved Hide resolved
@pkanher617 pkanher617 changed the base branch from authorization-code-flow-popupHandler to authorization-code-flow-base January 16, 2020 22:30
export type SystemOptions = {
loggerOptions?: BrowserLoggerOptions;
export type BrowserSystemOptions = SystemOptions & {
loggerOptions?: LoggerOptions;
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nitpick: Overwrites a generic loggerOptions object? If it is browser specific, the name is very generic. I will check the code as a whole later, this is for traction.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Logger isn't browser specific, only the implementation is, so I reverted back to generic logger options.

@pkanher617 pkanher617 merged commit 971ff23 into authorization-code-flow-base Jan 18, 2020
@pkanher617 pkanher617 deleted the authorization-code-flow-silentHandler branch January 23, 2020 21:49
azure-pipelines bot pushed a commit to pkanher617/microsoft-authentication-library-for-js that referenced this pull request Jan 4, 2022
…silentHandler

Authorization Code Flow for Single Page Applications: Silent Flow and Logout
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants