Target .NET 10 Preview

.github/workflows/aot-check.yml

@@ -11,6 +11,9 @@ on:
       - ready_for_review
     branches: [ "master", "rel/v2" ]
 
+env:
+  TargetNetNext: True
+
 jobs:
   analyze:
     runs-on: windows-latest
@@ -27,7 +30,19 @@ jobs:
       with:
         dotnet-version: 9.0.x
 
-    - name: Runs powershell script
-      id: aot-powershell
+    - name: Setup .NET 10.0 RC1
+      if: env.TargetNetNext == 'True'
+      uses: actions/setup-dotnet@v4
+      with:
+        dotnet-version: 10.0.100-rc.1.25451.107
+
+    - name: Runs AOT check with .NET 9.0
+      id: aot-powershell-net9
       run: build\test-aot.ps1 'net9.0'
 
+    - name: Runs AOT check with .NET 10.0
+      id: aot-powershell-net10
+      if: env.TargetNetNext == 'True'
+      run: build\test-aot.ps1 'net10.0'
+      continue-on-error: true
+

.github/workflows/codeql-analysis.yml

@@ -13,6 +13,9 @@ on:
     branches:
       - master
 
+env:
+  TargetNetNext: 'True'
+
 jobs:
   analyse:
     name: Analyse
@@ -54,6 +57,12 @@ jobs:
       with:
         dotnet-version: 9.0.x
 
+    - name: Setup .NET 10.0 RC1
+      uses: actions/setup-dotnet@v4
+      if: env.TargetNetNext == 'True'
+      with:
+        dotnet-version: 10.0.100-rc.1.25451.107
+
    # Install workload
     - name: Setup wasm-tools
       run: dotnet workload install wasm-tools
@@ -64,5 +73,10 @@ jobs:
     - name: Build with .NET 9
       run: dotnet test Microsoft.Identity.Web.sln -f net9.0 -p:FROM_GITHUB_ACTION=true --configuration Release --filter "(FullyQualifiedName!~Microsoft.Identity.Web.Test.Integration)&(FullyQualifiedName!~WebAppUiTests)&(FullyQualifiedName=IntegrationTests)"
 
+    - name: Build with .NET 10
+      if: env.TargetNetNext == 'True'
+      run: dotnet test Microsoft.Identity.Web.sln -f net10.0 -p:FROM_GITHUB_ACTION=true -p:TargetNetNext=${{env.TargetNetNext}} --configuration Release --filter "(FullyQualifiedName!~Microsoft.Identity.Web.Test.Integration)&(FullyQualifiedName!~WebAppUiTests)&(FullyQualifiedName=IntegrationTests)"
+      continue-on-error: true
+
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v3

.github/workflows/dotnetcore.yml

@@ -17,6 +17,9 @@ on:
     branches:
       - master
 
+env:
+  TargetNetNext: 'True'
+
 jobs:
   build:
     runs-on: windows-latest
@@ -33,6 +36,12 @@ jobs:
       with:
         dotnet-version: 9.0.x
 
+    - name: Setup .NET 10.0 RC1
+      if: env.TargetNetNext == 'True'
+      uses: actions/setup-dotnet@v4
+      with:
+        dotnet-version: 10.0.100-rc.1.25451.107
+
     - name: 'Setup MSBuild'
       uses: microsoft/setup-msbuild@v2
       with:
@@ -42,7 +51,7 @@ jobs:
       run: dotnet workload install wasm-tools
 
     - name: Build solution
-      run: msbuild Microsoft.Identity.Web.sln -r -t:build -verbosity:m -property:Configuration=Release
+      run: msbuild Microsoft.Identity.Web.sln -r -t:build -verbosity:m -property:Configuration=Release -property:TargetNetNext=${{env.TargetNetNext}}
 
     - name: Test with .NET 8.0.x
       run: dotnet test --no-restore --no-build Microsoft.Identity.Web.sln -f net8.0 -v m -p:FROM_GITHUB_ACTION=true --configuration Release --collect "Xplat Code Coverage" --filter "(FullyQualifiedName!~Microsoft.Identity.Web.Test.Integration)&(FullyQualifiedName!~WebAppUiTests)&(FullyQualifiedName!~IntegrationTests)&(FullyQualifiedName!~TokenAcquirerTests)&(FullyQualifiedName!~AgentApplicationsTests)"
@@ -51,6 +60,10 @@ jobs:
       run: dotnet test --no-restore --no-build Microsoft.Identity.Web.sln -f net9.0 -v m -p:FROM_GITHUB_ACTION=true --configuration Release --collect "Xplat Code Coverage" --filter "(FullyQualifiedName!~Microsoft.Identity.Web.Test.Integration)&(FullyQualifiedName!~WebAppUiTests)&(FullyQualifiedName!~IntegrationTests)&(FullyQualifiedName!~TokenAcquirerTests)&(FullyQualifiedName!~AgentApplicationsTests)&(FullyQualifiedName!~SidecarEndpointsE2ETests)"
 
 
+    - name: Test with .NET 10.0.x
+      if: env.TargetNetNext == 'True'
+      run: dotnet test --no-restore --no-build Microsoft.Identity.Web.sln -f net10.0 -v m -p:FROM_GITHUB_ACTION=true -p:TargetNetNext=${{env.TargetNetNext}} --configuration Release --collect "Xplat Code Coverage" --filter "(FullyQualifiedName!~Microsoft.Identity.Web.Test.Integration)&(FullyQualifiedName!~WebAppUiTests)&(FullyQualifiedName!~IntegrationTests)&(FullyQualifiedName!~TokenAcquirerTests)"
+      continue-on-error: true
 
     - name: Create code coverage report
       run: |

Directory.Build.props

@@ -1,15 +1,18 @@
 <Project>
   <PropertyGroup>
     <!--This should be passed from the VSTS build-->
-    <!-- This needs to be greater than or equal to the validation baseline version -->
-    <MicrosoftIdentityWebVersion Condition="'$(MicrosoftIdentityWebVersion)' == ''">4.0.0</MicrosoftIdentityWebVersion>
+    <!-- This needs to be greater than or equal to the validation baseline version. The conditional logic around TargetNetNext is there
+    to avoid NU5104 for packing a release version library with prerelease deps. By adding preview to it, that warning is avoided.
+    -->
+  <MicrosoftIdentityWebVersion Condition="'$(MicrosoftIdentityWebVersion)' == ''">4.0.0</MicrosoftIdentityWebVersion>
     <!--This will generate AssemblyVersion, AssemblyFileVersion and AssemblyInformationVersion-->
     <Version>$(MicrosoftIdentityWebVersion)</Version>
 
     <EnablePackageValidation>true</EnablePackageValidation>
     <PackageValidationBaselineVersion>3.14.1</PackageValidationBaselineVersion>
 
-    <AssemblyOriginatorKeyFile>$(MSBuildThisFileDirectory)\build\35MSSharedLib1024.snk</AssemblyOriginatorKeyFile>
+    <BuildDirectory>$(MSBuildThisFileDirectory)/build</BuildDirectory>
+    <AssemblyOriginatorKeyFile>$(BuildDirectory)/35MSSharedLib1024.snk</AssemblyOriginatorKeyFile>
     <RepositoryType>git</RepositoryType>
     <Authors>Microsoft</Authors>
     <Company>Microsoft Corporation</Company>
@@ -23,11 +26,16 @@
     <PackageRequireLicenseAcceptance>true</PackageRequireLicenseAcceptance>
   </PropertyGroup>
 
+  <!-- Uncomment this property group to build with NET 10.0 locally or set TargetNetNext to True in a CLI arg-->
+  <!-- <PropertyGroup>
+    <TargetNetNext>True</TargetNetNext>
+  </PropertyGroup> -->
+
   <PropertyGroup>
     <!-- For files to appear in the Visual Studio Solution explorer given we have conditional inclusion in some projects (IdWeb for instance)
          we need to have the higher framework, even if this produces a warning in the IDE -->
     <TargetFrameworks>net8.0; net9.0; net462; net472; netstandard2.0</TargetFrameworks>
-    <TargetFrameworks Condition="'$(TargetNetNext)'== 'True'">$(TargetFrameworks); </TargetFrameworks>
+    <TargetFrameworks Condition="'$(TargetNetNext)'== 'True'">$(TargetFrameworks); net10.0</TargetFrameworks>
     <SignAssembly>true</SignAssembly>
     <AssemblyOriginatorKeyFile>../../build/MSAL.snk</AssemblyOriginatorKeyFile>
     <GenerateDocumentationFile>true</GenerateDocumentationFile>
@@ -36,10 +44,17 @@
     <EnforceCodeStyleInBuild>true</EnforceCodeStyleInBuild>
     <LangVersion>13</LangVersion>
     <TreatWarningsAsErrors>true</TreatWarningsAsErrors>
-    <NoWarn>$(NoWarn);NETSDK1138</NoWarn>
   </PropertyGroup>
 
-
+  <PropertyGroup Condition="'$(TargetNetNext)' == 'True'">
+    <SuppressNETCoreSdkPreviewMessage>true</SuppressNETCoreSdkPreviewMessage>
+    <!-- Compiling w/ Net 10.0 SDK gives the NU1510 warning in every net core version "PackageReference System.Formats.Asn1 will not be pruned.
+    Consider removing this package from your dependencies, as it is likely unnecessary." However, the ref is necessary due to Microsoft Security Advisory CVE-2024-38095.
+    For NU5104 it prevents us from packing release packages with prerelease dependencies. But we want to do that so customers can get a preview of running with .NET 10. -->
+    <WarningsNotAsErrors>$(WarningsNotAsErrors);NU1510;NU5104</WarningsNotAsErrors>
+    <NoWarn>$(NoWarn);NU1510;NU5104</NoWarn>
+    <CheckEolTargetFramework>false</CheckEolTargetFramework>
+  </PropertyGroup>
 
   <PropertyGroup Condition="'$(TF_BUILD)' == 'true'">
     <ContinuousIntegrationBuild>true</ContinuousIntegrationBuild>
@@ -116,6 +131,23 @@
     <MicrosoftExtensionsDependencyInjectionVersion>$(NetNineRuntimeVersion)</MicrosoftExtensionsDependencyInjectionVersion>
   </PropertyGroup>
 
+  <PropertyGroup Condition="'$(TargetFramework)' == 'net10.0'">
+    <NetTenRuntimeVersion>10.0.0-rc.1.25451.107</NetTenRuntimeVersion>
+    <AspNetCoreTenRuntimeVersion>10.0.0-rc.1.25451.107</AspNetCoreTenRuntimeVersion>
+    <MicrosoftAspNetCoreAuthenticationJwtBearerVersion>$(AspNetCoreTenRuntimeVersion)</MicrosoftAspNetCoreAuthenticationJwtBearerVersion>
+    <MicrosoftAspNetCoreAuthenticationOpenIdConnectVersion>$(AspNetCoreTenRuntimeVersion)</MicrosoftAspNetCoreAuthenticationOpenIdConnectVersion>
+    <MicrosoftExtensionsCachingMemoryVersion>$(NetTenRuntimeVersion)</MicrosoftExtensionsCachingMemoryVersion>
+    <MicrosoftExtensionsHostingVersion>$(NetTenRuntimeVersion)</MicrosoftExtensionsHostingVersion>
+    <MicrosoftAspNetCoreDataProtectionVersion>$(AspNetCoreTenRuntimeVersion)</MicrosoftAspNetCoreDataProtectionVersion>
+    <SystemSecurityCryptographyPkcsVersion>$(NetTenRuntimeVersion)</SystemSecurityCryptographyPkcsVersion>
+    <SystemSecurityCryptographyXmlVersion>$(NetTenRuntimeVersion)</SystemSecurityCryptographyXmlVersion>
+    <MicrosoftExtensionsLoggingVersion>$(NetTenRuntimeVersion)</MicrosoftExtensionsLoggingVersion>
+    <MicrosoftExtensionsConfigurationBinderVersion>$(NetTenRuntimeVersion)</MicrosoftExtensionsConfigurationBinderVersion>
+    <SystemFormatsAsn1Version>$(NetTenRuntimeVersion)</SystemFormatsAsn1Version>
+    <SystemTextJsonVersion>$(NetTenRuntimeVersion)</SystemTextJsonVersion>
+    <MicrosoftExtensionsDependencyInjectionVersion>$(NetTenRuntimeVersion)</MicrosoftExtensionsDependencyInjectionVersion>
+  </PropertyGroup>
+
   <PropertyGroup Condition="'$(TargetFramework)' == 'net8.0'">
     <MicrosoftAspNetCoreAuthenticationJwtBearerVersion>8.0.0</MicrosoftAspNetCoreAuthenticationJwtBearerVersion>
     <MicrosoftAspNetCoreAuthenticationOpenIdConnectVersion>8.0.0</MicrosoftAspNetCoreAuthenticationOpenIdConnectVersion>

README.md

@@ -75,6 +75,38 @@ This library controls how users sign-in and access services. We recommend you al
 
 If you find a security issue with our libraries or services, please report it to [secure@microsoft.com](mailto:secure@microsoft.com) with as much detail as possible. Your submission may be eligible for a bounty through the [Microsoft Bounty](http://aka.ms/bugbounty) program. Please do not post security issues to GitHub Issues or any other public site. We will contact you shortly upon receiving the information. We encourage you to get notifications of when security incidents occur by visiting [this page](https://technet.microsoft.com/en-us/security/dd252948) and subscribing to Security Advisory Alerts.
 
+## Building with .NET Preview Versions
+
+Microsoft Identity Web supports building and testing with .NET preview versions using the `TargetNetNext` conditional compilation flag. This enables early testing and compatibility validation with the latest .NET preview releases.
+
+### Prerequisites
+
+- Install .NET 10 preview SDK from [https://dotnet.microsoft.com/download/dotnet/10.0](https://dotnet.microsoft.com/download/dotnet/10.0)
+
+### Building with .NET 10 Preview
+
+To build the solution with .NET 10 preview support:
+
+```bash
+# Build with .NET 10 preview targets included
+dotnet build Microsoft.Identity.Web.sln -p:TargetNetNext=True
+
+# Or using MSBuild
+msbuild Microsoft.Identity.Web.sln -p:TargetNetNext=True
+```
+You can also set the TargetNetNext environment variable on your machine with the value `True`.
+
+### Testing with .NET 10 Preview
+
+To run tests targeting .NET 10 preview:
+
+```bash
+# Run tests with .NET 10 preview (conditional)
+dotnet test Microsoft.Identity.Web.sln -f net10.0 -p:TargetNetNext=True
+```
+
+**Note:** .NET 10 preview support is conditional and requires setting `TargetNetNext=True` during build/test operations. This ensures compatibility with the latest preview versions while maintaining stability for production builds.
+
 ## Trademarks
 
 This project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft trademarks or logos is subject to and must follow [Microsoft's Trademark & Brand Guidelines](https://www.microsoft.com/legal/intellectualproperty/trademarks). Use of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship. Any use of third-party trademarks or logos are subject to those third-party's policies.

benchmark/Benchmarks.csproj

@@ -13,6 +13,7 @@
   <ItemGroup>
     <PackageReference Include="BenchmarkDotNet" Version="$(BenchmarkDotNetVersion)" />
     <PackageReference Include="BenchmarkDotNet.Diagnostics.Windows" Version="$(BenchmarkDotNetDiagnosticsWindowsVersion)" />
+    <PackageReference Include="System.Text.RegularExpressions" Version="$(SystemTextRegularExpressionsVersion)" />
   </ItemGroup>
 
   <ItemGroup>

benchmark/Directory.Build.props

@@ -7,17 +7,17 @@
     <EnablePackageValidation>false</EnablePackageValidation>
     <SignAssembly>True</SignAssembly>
     <DelaySign>True</DelaySign>
-    <AssemblyOriginatorKeyFile>$(MSBuildThisFileDirectory)..\build\MSAL.snk</AssemblyOriginatorKeyFile>
+    <AssemblyOriginatorKeyFile>$(BuildDirectory)/MSAL.snk</AssemblyOriginatorKeyFile>
     <ImplicitUsings>enable</ImplicitUsings>
     <Nullable>enable</Nullable>
   </PropertyGroup>
 
-
-
   <PropertyGroup Label="Common dependency versions">
     <MicrosoftIdentityLabApiVersion>1.0.0</MicrosoftIdentityLabApiVersion>
     <BenchmarkDotNetVersion>0.13.12</BenchmarkDotNetVersion>
     <BenchmarkDotNetDiagnosticsWindowsVersion>0.13.12</BenchmarkDotNetDiagnosticsWindowsVersion>
+    <SystemNetHttpVersion>4.3.4</SystemNetHttpVersion>
+    <SystemTextRegularExpressionsVersion>4.3.1</SystemTextRegularExpressionsVersion>
 	</PropertyGroup>
 
   <ItemGroup>
@@ -26,8 +26,7 @@
 
   <PropertyGroup>
     <!--RS0016: Add public types and members to the declared API-->
-    <NoWarn>RS0016</NoWarn>
     <!--RS0031: The list of banned symbols contains a duplicate-->
-    <NoWarn>RS0031</NoWarn>
+    <NoWarn>$(NoWarn);RS0016;RS0031</NoWarn>
   </PropertyGroup>
 </Project>

build/template-install-dependencies.yaml

@@ -28,6 +28,13 @@ steps:
   inputs:
     useGlobalJson: true
 
+- task: UseDotNet@2
+  displayName: 'Use .NET SDK 10.0 RC1'
+  inputs:
+    version: 10.0.100-rc.1.25451.107
+    useGlobalJson: false
+    includePreviewVersions: true
+
 # Run Nuget Tool Installer
 
 - task: NuGetToolInstaller@1

build/test-aot.ps1

@@ -2,7 +2,14 @@ param([string]$targetNetFramework)
 
 $projectName='Microsoft.Identity.Web.AotCompatibility.TestApp'
 $rootDirectory = Split-Path $PSScriptRoot -Parent
-$publishOutput = dotnet publish $rootDirectory/tests/$projectName/$projectName.csproj --framework $targetNetFramework -nodeReuse:false /p:UseSharedCompilation=false
+
+# Add TargetNetNext parameter if targeting .NET 10
+$additionalParams = ""
+if ($targetNetFramework -eq "net10.0") {
+    $additionalParams = "/p:TargetNetNext=True"
+}
+
+$publishOutput = dotnet publish $rootDirectory/tests/$projectName/$projectName.csproj --framework $targetNetFramework -nodeReuse:false /p:UseSharedCompilation=false $additionalParams
 
 $actualWarningCount = 0
 

global.json

@@ -4,6 +4,7 @@
     },
     "sdk": {
         "version": "9.0.111",
-        "rollForward": "latestFeature"
+        "allowPrerelease": true,
+        "rollForward": "latestMajor"
     }
 }

src/Microsoft.Identity.Web.Diagnostics/PublicAPI/net10.0/InternalAPI.Shipped.txt

@@ -0,0 +1,31 @@
+#nullable enable
+Microsoft.Identity.Web.Diagnostics.IdHelper
+Microsoft.Identity.Web.Diagnostics.OsHelper
+Microsoft.Identity.Web.Diagnostics.OsHelper.OsHelper() -> void
+Microsoft.Identity.Web.IdHelper
+Microsoft.Identity.Web.Throws
+static Microsoft.Identity.Web.Diagnostics.IdHelper.CreateTelemetryInfo() -> string!
+static Microsoft.Identity.Web.Diagnostics.IdHelper.GetIdWebVersion() -> string!
+static Microsoft.Identity.Web.Diagnostics.OsHelper.IsLinuxPlatform() -> bool
+static Microsoft.Identity.Web.Diagnostics.OsHelper.IsMacPlatform() -> bool
+static Microsoft.Identity.Web.Diagnostics.OsHelper.IsWindowsPlatform() -> bool
+static Microsoft.Identity.Web.IdHelper.CreateTelemetryInfo() -> string!
+static Microsoft.Identity.Web.IdHelper.GetIdWebVersion() -> string!
+static Microsoft.Identity.Web.Throws.ArgumentException(string! paramName, string? message) -> void
+static Microsoft.Identity.Web.Throws.ArgumentException(string! paramName, string? message, System.Exception? innerException) -> void
+static Microsoft.Identity.Web.Throws.ArgumentNullException(string! paramName) -> void
+static Microsoft.Identity.Web.Throws.ArgumentNullException(string! paramName, string? message) -> void
+static Microsoft.Identity.Web.Throws.ArgumentOutOfRangeException(string! paramName) -> void
+static Microsoft.Identity.Web.Throws.ArgumentOutOfRangeException(string! paramName, object? actualValue, string? message) -> void
+static Microsoft.Identity.Web.Throws.ArgumentOutOfRangeException(string! paramName, string? message) -> void
+static Microsoft.Identity.Web.Throws.IfBufferTooSmall(int bufferSize, int requiredSize, string! paramName = "") -> void
+static Microsoft.Identity.Web.Throws.IfMemberNull<TParameter, TMember>(TParameter argument, TMember member, string! paramName = "", string! memberName = "") -> TMember
+static Microsoft.Identity.Web.Throws.IfNull<T>(T argument, string! paramName = "") -> T
+static Microsoft.Identity.Web.Throws.IfNullOrEmpty(string? argument, string! paramName = "") -> string!
+static Microsoft.Identity.Web.Throws.IfNullOrEmpty<T>(System.Collections.Generic.ICollection<T>? argument, string! paramName = "") -> System.Collections.Generic.ICollection<T>!
+static Microsoft.Identity.Web.Throws.IfNullOrEmpty<T>(System.Collections.Generic.IReadOnlyCollection<T>? argument, string! paramName = "") -> System.Collections.Generic.IReadOnlyCollection<T>!
+static Microsoft.Identity.Web.Throws.IfNullOrMemberNull<TParameter, TMember>(TParameter argument, TMember member, string! paramName = "", string! memberName = "") -> TMember
+static Microsoft.Identity.Web.Throws.IfNullOrWhitespace(string? argument, string! paramName = "") -> string!
+static Microsoft.Identity.Web.Throws.IfOutOfRange<T>(T argument, string! paramName = "") -> T
+static Microsoft.Identity.Web.Throws.InvalidOperationException(string! message) -> void
+static Microsoft.Identity.Web.Throws.InvalidOperationException(string! message, System.Exception? innerException) -> void

src/Microsoft.Identity.Web.Diagnostics/PublicAPI/net10.0/InternalAPI.Unshipped.txt

@@ -0,0 +1 @@
+#nullable enable

src/Microsoft.Identity.Web.Diagnostics/PublicAPI/net10.0/PublicAPI.Shipped.txt

@@ -0,0 +1 @@
+#nullable enable

src/Microsoft.Identity.Web.Diagnostics/PublicAPI/net10.0/PublicAPI.Unshipped.txt

@@ -0,0 +1 @@
+#nullable enable