MSAL Python 1.35.0b1

Highlights

• The managed identity code path no longer has a dependency on the socket.getfqdn(). No API change is needed. Existing MSAL-powered apps will automatically pick up this new behavior.
• This version of MSAL Python will pick up PyMsalRuntime 0.20.*. No API change is needed. Existing MSAL-powered apps will automatically pick up this new behavior.
• The thumbprint name-value pair in the client_credential parameter becomes optional now. See API docs for usage.

What's Changed

• ROPC deprecation by @Ugonnaak1 in #855
• Test case for token response scope differing from token request scope by @rayluo in #856
• Update pymsalruntime version range to handle the latest 0.20.0 release by @DharshanBJ in #858
• Document how to enable sha256 for client credential by @rayluo in #833
• Remove the reliance on getfqdn() by @rayluo in #859
• Thumbprint for certificate made optional by @vi7us in #835
• Support Python 3.14 by @rayluo in #861
• Explicitly remove issuer from the OIDC discovery response by @rayluo in #863
• Suppress CodeQL warning by @bgavrilMS in #867

New Contributors

• @ashok672 made their first contribution in #839
• @xinyuxu1026 made their first contribution in #846
• @dependabot[bot] made their first contribution in #849
• @vi7us made their first contribution in #835

Full Changelog: 1.34.0...1.35.0b1

MSAL Python 1.34.0

This release includes:

• All the changes in 1.34.0b1, plus bumping the dependency cryptography upper bound, which also drops Python 3.7 support.
• Officially support Python 3.13

What's Changed

• ManagedIdentityClient(..., client_capabilities=["cp1"]).acquire_token_for_client(..., claims_challenge="...") by @rayluo in #791
• Update deprecated TokenCache API usage by @pvaneck in #805
• Enable broker support on Linux for WSL by @DharshanBJ in #766
• Fix username/password validation in broker test by @emmanuel-ferdman in #807
• Merge release 1.32.3 back to dev branch by @rayluo in #816
• Add dependency management suggestions by @rayluo in #819
• Remind developers about http_cache's unstable format by @rayluo in #821
• Properly throw MsalServiceError exception by @rayluo in #820
• Improve test cases to test header-less response by @rayluo in #822
• Upgrade dependency by @rayluo in #824
• Linux broker needs a specific redirect_uri by @rayluo in #826
• MSAL Python 1.33.0b1 release by @rayluo in #827
• Use lowercase environment value during searching by @rayluo in #831
• Add claims challenge parameter in initiate_device_flow by @ashok672 in #839
• MSAL Python 1.33.0 by @rayluo in #841
• Declare support for Python 3.13 by @rayluo in #851

New Contributors

• @pvaneck made their first contribution in #805
• @emmanuel-ferdman made their first contribution in #807
• @ashok672 made their first contribution in #839

Full Changelog: 1.32.3...1.34.0

MSAL Python 1.34.0b1

What's Changed

• Use lowercase environment value during searching by @rayluo in #831
• Add claims challenge parameter in initiate_device_flow by @ashok672 in #839

New Contributors

• @ashok672 made their first contribution in #839

Full Changelog: 1.33.0...1.34.0b1

MSAL Python 1.33.0

Re-shipping beta release 1.33.0b1 as stable 1.33.0

Highlights

• Managed Identity on Service Fabric supports specifying client_capabilities and claims_challenge (#791)
• Broker support on Linux and WSL. (#766)
• A byproduct of this is that broker on all platforms will support Python 3.13. (#823)

MSAL Python 1.33.0b1

Highlights

• Managed Identity on Service Fabric supports specifying client_capabilities and claims_challenge (#791)
• Broker support on Linux and WSL. (#766)
• A byproduct of this is that broker on all platforms will support Python 3.13. (#823)

What's Changed

• ManagedIdentityClient(..., client_capabilities=["cp1"]).acquire_token_for_client(..., claims_challenge="...") by @rayluo in #791
• Update deprecated TokenCache API usage by @pvaneck in #805
• Enable broker support on Linux for WSL by @DharshanBJ in #766
• Fix username/password validation in broker test by @emmanuel-ferdman in #807
• Merge release 1.32.3 back to dev branch by @rayluo in #816
• Add dependency management suggestions by @rayluo in #819
• Remind developers about http_cache's unstable format by @rayluo in #821
• Properly throw MsalServiceError exception by @rayluo in #820
• Improve test cases to test header-less response by @rayluo in #822
• Upgrade dependency by @rayluo in #824
• Linux broker needs a specific redirect_uri by @rayluo in #826
• MSAL Python 1.33.0b1 release by @rayluo in #827

New Contributors

• @pvaneck made their first contribution in #805
• @emmanuel-ferdman made their first contribution in #807

Full Changelog: 1.32.3...1.33.0b1

Stable Release plan

We monitor the adoption numbers and will ship a stable version when this beta has similar amount of downloads to its previous beta version(s).

MSAL Python 1.32.3

Fix a regression on Azure Arc / on-prem servers. (#814, #815)

MSAL Python 1.32.2

Bugfix for Authentication Failed: MsalResponse object has no attribute 'headers' #812

MSAL Python 1.32.1

Optimization on cache.

MSAL Python 1.32.0

Noticeable Changes

• New feature: Supports dSTS by ClientApplication(..., authority="https://...example.com/dstsv2/...") (#767, #772)
• New feature: Start to support POD Identity, configured by env var AZURE_POD_IDENTITY_AUTHORITY_HOST=http://ip:port (#794, #795)
• Bugfix: Support resource with the format of "GUID/.default" when running inside Cloud Shell. (#784, #785)

More details

• Refactor to allow adding new field into cache key and/or content by @rayluo in #751
• Warning when obsolete msal-extensions is detected by @rayluo in #752
• Add msal_cache.bin to .gitignore by @DharshanBJ in #753
• MSAL will use env var MSAL_FORCE_REGION by default by @rayluo in #756
• allow MI endpoint changing through environment variable by @jimdigriz in #754
• Revert "allow MI endpoint changing through environment variable" by @rayluo in #769
• Fix document for using SystemAssigned managed identity by @jiasli in #764
• Suppress a false positive CodeQL alarm by @rayluo in #783
• Pass Sku and Ver to MsalRuntime by @Ugonnaak1 in #786
• Try to suppress another verify=False by @rayluo in #788
• Supports dSTS by ClientApplication(..., authority="https://...example.com/dstsv2/...") by @rayluo in #772
• Add test case to show that OBO supports SP by @rayluo in #481
• Enable Issue-Sentinel to scan for similar issues by @DharshanBJ in #790
• Support pod identity by @rayluo in #795
• Scope to resource by @rayluo in #785

New Contributors

• @DharshanBJ made their first contribution in #753
• @jimdigriz made their first contribution in #754
• @Ugonnaak1 made their first contribution in #786

Full Changelog: 1.31.1...1.32.0

1.31.2b1

• acquire_token_interactive(...) supports scope with the shape of "GUID/.default" when running inside Cloud Shell (#784, #785)