-
Notifications
You must be signed in to change notification settings - Fork 242
Closed
Labels
Description
Is your feature request related to a problem? Please describe.
Add ROPC flow to Id web for CCA and potentially extend it to use user fic in MISE
Describe the solution you'd like
ClaimsPrincipal user= ClaimsPrincipalFactory.FromUsernamePassword("user@domain.com", "pwd");
downstreamApi.CallApiForUser("api", user: user);Possible design
-
In
ClaimsPrincipalFactoryadd a method to return a ClaimsPrincipal with 2 claims (xms-username and xms-password) based on the values provided. -
In TokenAcquisition.GetAuthenticationResultForUserAsync, if the user parameter is not null, and has the 2 claims xms-username and xms-password claims, then perform ROPC for CCA as a first step (in the try to still benefit from the client credentials rotation)
Describe alternatives you've considered
Additional context
neha-bhargava