Skip to content

Implement Parent bot to Skill service to service authentication #5590

Closed
@gabog

Description

@gabog

This task involves extending the current authentication and token management capabilities to allow parent bots to communicate back and forth with skills using authentication tokens.

The new authentication capabilities should:

  • Support v1 and v2 tokens
  • Pass in the calling bot ID in the appid or azp claim and AppId in the aud claim.

Here is a v1 sample on the claims sent from a Parent Bot with AppId=4c0039e5-6816-48e8-b313-f77691ff1c5e to a Skill with AppId=4c33c421-f7d3-4b6c-992b-36e7e6de8761
image

And here is v2 sample of the claims sent from a Skill Bot with AppId=4c33c421-f7d3-4b6c-992b-36e7e6de8761 to a Parent with AppId=4c0039e5-6816-48e8-b313-f77691ff1c5e
image

Note: Anonymous parent bots or skills will not be supported, a parent bot won't be able to communicate with a skill if they don't have proper MS AppIds and Passwords assigned to them and configured in settings.

Tracking Status

Dotnet SDK (Tracked in 2743)

  • PR
  • Merged

Javascript SDK (Tracked in 1310)

  • PR
  • Merged

Python SDK (Tracked in 342)

  • PR
  • Merged

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions