From 198857c8a2211931739e6e08facfbab52f8dd023 Mon Sep 17 00:00:00 2001 From: Artak <34246760+mkArtakMSFT@users.noreply.github.com> Date: Wed, 18 Oct 2023 13:24:54 -0700 Subject: [PATCH] Update the Microsoft.IdentityModel.* and Microsoft.Identity.Web.* packages to the latest patch release (7.0.3 & 2.15.2) (#51430) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit # Update the Microsoft.IdentityModel.* and Microsoft.Identity.Web.* packages to the latest patch release (7.0.3 & 2.15.2) Update the reference to the Microsoft.IdentityModel.* and Microsoft.Identity.Web.* packages so that we don't regress AAD authentication scenarios for web apps. ## Description We've hit an issue with AAD authentication in ASP.NET Core web apps, which was resulting in errors during login. This was due to an issue in the IdentityModel package, for which @halter73 has proposed a fix: https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/2361 The Identity team has approved the fix and has released a new package to NuGet so that we can update our dependency and **avoid the regression in 8.0**. Please note, that this change will have to include the soure-build change as well: https://github.com/dotnet/source-build-externals/pull/228 Fixes https://github.com/dotnet/aspnetcore/issues/51005 ## Customer Impact Customers who will try to use AAD authentication for their ASP.NET Core web applications in 8.0 will fail to login. ## Regression? - [x] Yes - [ ] No This was technically an existing bug, which was already in the IdentityModel package, however only after a recent change https://github.com/dotnet/aspnetcore/pull/49542 the issue has surfaced impacting 8.0 apps.   ## Risk - [ ] High - [ ] Medium - [x] Low From our point of view this is a dependency update. And the dependency has taken only a targeted fix to avoid the bug, going through all the necessary validation on the AAD side. ## Verification - [x] Manual (required) - [ ] Automated ## Packaging changes reviewed? - [ ] Yes - [ ] No - [x] N/A ---- ## When servicing release/2.1 - [ ] Make necessary changes in eng/PatchConfig.props --------- Co-authored-by: dotnet-maestro[bot] Co-authored-by: Stephen Halter --- eng/Version.Details.xml | 4 ++-- eng/Versions.props | 12 ++++++------ .../Web.ProjectTemplates/WebApi-CSharp.csproj.in | 4 ++-- 3 files changed, 10 insertions(+), 10 deletions(-) diff --git a/eng/Version.Details.xml b/eng/Version.Details.xml index 086e9260a39d..379abe9e5ac8 100644 --- a/eng/Version.Details.xml +++ b/eng/Version.Details.xml @@ -189,9 +189,9 @@ https://github.com/dotnet/runtime 60b77a63df30362ed1c66a834fcb8f8956ea113b - + https://github.com/dotnet/source-build-externals - ed17956dbc31097b7ba6a66be086f4a70a97d84f + 3dc05150cf234f76f6936dcb2853d31a0da1f60e diff --git a/eng/Versions.props b/eng/Versions.props index 2a90baf52c3d..4ef9e1f6379d 100644 --- a/eng/Versions.props +++ b/eng/Versions.props @@ -12,7 +12,7 @@ true - 7.0.0 + 7.0.3 @@ -165,7 +165,7 @@ 8.0.0-beta.23463.1 8.0.0-beta.23463.1 - 8.0.0-alpha.1.23502.1 + 8.0.0-alpha.1.23518.1 8.0.0-alpha.1.23516.4 @@ -298,10 +298,10 @@ 2.57.0 2.57.0 2.5.108 - 2.13.0 - 2.13.0 - 2.13.0 - 2.13.0 + 2.15.2 + 2.15.2 + 2.15.2 + 2.15.2 $(MessagePackVersion) 4.10.0 0.11.2 diff --git a/src/ProjectTemplates/Web.ProjectTemplates/WebApi-CSharp.csproj.in b/src/ProjectTemplates/Web.ProjectTemplates/WebApi-CSharp.csproj.in index 63e74917e0f4..bf6d200e57d5 100644 --- a/src/ProjectTemplates/Web.ProjectTemplates/WebApi-CSharp.csproj.in +++ b/src/ProjectTemplates/Web.ProjectTemplates/WebApi-CSharp.csproj.in @@ -12,9 +12,9 @@ - + - +