Closed
Description
Problem description: Historically, there is no api in MSAL to remove tokens obtained from AcquireTokenForClient()
. Therefore, there is no way for an app to "log out" a service principal.
Proposal: MSALs add a new API ConfidentialClientApplication.RemoveAppTokens()
ConfidentialClientApplication.remove_tokens_for_client()
.
- It will purge app tokens that match the current app's authority (host + tenant) and client_id.
- It does not accept a
scope
parameter, because our intention is to purge all app tokens for the current app, regardless of their scopes. - It will NOT purge user tokens obtained by this app.