Skip to content

Feature Request: Removing app tokens #640

Closed
@rayluo

Description

@rayluo

Problem description: Historically, there is no api in MSAL to remove tokens obtained from AcquireTokenForClient(). Therefore, there is no way for an app to "log out" a service principal.

Proposal: MSALs add a new API ConfidentialClientApplication.RemoveAppTokens() ConfidentialClientApplication.remove_tokens_for_client().

  • It will purge app tokens that match the current app's authority (host + tenant) and client_id.
  • It does not accept a scope parameter, because our intention is to purge all app tokens for the current app, regardless of their scopes.
  • It will NOT purge user tokens obtained by this app.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions