Skip to content

v2.1.1

Latest
Latest

Choose a tag to compare

View all tags
@MehakBindra MehakBindra released this 16 Oct 21:39
v2.1.1
79ed749
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

This patch release tightens validation of inbound activities authenticated with Microsoft Entra Agent ID tokens.

Changes

Authentication

  • Accept Entra-authenticated inbound activities only when the caller is the Agent 365 platform. The caller is read from azp, or from appid when azp is absent, and matched case-insensitively. Other callers receive HTTP 401. Bot Framework authentication is unchanged (#935) by Corina (@corinagum), backported in #952.

Install

npm install @microsoft/teams.apps@latest

Full Changelog: v2.1.0...v2.1.1

Contributors

corinagum
Assets 2
Loading