diff --git a/ProjectTemplates/AspNetCoreMicrosoftIdentityWebProjectTemplates.csproj b/ProjectTemplates/AspNetCoreMicrosoftIdentityWebProjectTemplates.csproj index 014f5e74c..1cfeca02c 100644 --- a/ProjectTemplates/AspNetCoreMicrosoftIdentityWebProjectTemplates.csproj +++ b/ProjectTemplates/AspNetCoreMicrosoftIdentityWebProjectTemplates.csproj @@ -8,13 +8,13 @@ Template Microsoft.Identity.Web.ProjectTemplates - ASP.NET Core Web app and Web API templates with Microsoft identity platform + ASP.NET Core web app and web API templates with Microsoft identity platform true Microsoft © Microsoft Corporation. All rights reserved. Microsoft - Templates to use when creating a web app that signs in users or a protected Web API + Templates to use when creating a web app that signs in users or a protected web API with the Microsoft identity platform (and call downstream APIs) MIT diff --git a/src/Microsoft.Identity.Web/HttpContextExtensions.cs b/src/Microsoft.Identity.Web/HttpContextExtensions.cs index 92d33df3a..12d19f64c 100644 --- a/src/Microsoft.Identity.Web/HttpContextExtensions.cs +++ b/src/Microsoft.Identity.Web/HttpContextExtensions.cs @@ -21,7 +21,7 @@ internal static void StoreTokenUsedToCallWebAPI(this HttpContext httpContext, Jw } /// - /// Get the parsed information about the token used to call the Web API. + /// Get the parsed information about the token used to call the web API. /// /// HTTP context associated with the current request. /// used to call the web API. diff --git a/src/Microsoft.Identity.Web/ITokenAcquisition.cs b/src/Microsoft.Identity.Web/ITokenAcquisition.cs index 6e4c233f2..a837996bd 100644 --- a/src/Microsoft.Identity.Web/ITokenAcquisition.cs +++ b/src/Microsoft.Identity.Web/ITokenAcquisition.cs @@ -15,7 +15,7 @@ namespace Microsoft.Identity.Web public interface ITokenAcquisition { /// - /// Typically used from an ASP.NET Core Web App or Web API controller, this method gets an access token + /// Typically used from an ASP.NET Core web app or web API controller, this method gets an access token /// for a downstream API on behalf of the user account which claims are provided in the /// member of the controller's parameter. /// @@ -48,7 +48,7 @@ Task GetAccessTokenForUserAsync( Task GetAccessTokenForAppAsync(string scope, string? tenant = null); /// - /// Used in Web APIs (which therefore cannot have an interaction with the user). + /// Used in web APIs (which therefore cannot have an interaction with the user). /// Replies to the client through the HttpResponse by sending a 403 (forbidden) and populating wwwAuthenticateHeaders so that /// the client can trigger an interaction with the user so the user can consent to more scopes. /// diff --git a/src/Microsoft.Identity.Web/ITokenAcquisitionInternal.cs b/src/Microsoft.Identity.Web/ITokenAcquisitionInternal.cs index 4d9162547..c48fc2d48 100644 --- a/src/Microsoft.Identity.Web/ITokenAcquisitionInternal.cs +++ b/src/Microsoft.Identity.Web/ITokenAcquisitionInternal.cs @@ -13,7 +13,7 @@ namespace Microsoft.Identity.Web internal interface ITokenAcquisitionInternal : ITokenAcquisition { /// - /// In a Web App, adds, to the MSAL.NET cache, the account of the user authenticating to the Web App, when the authorization code is received (after the user + /// In a web app, adds, to the MSAL.NET cache, the account of the user authenticating to the web app, when the authorization code is received (after the user /// signed-in and consented) /// An On-behalf-of token contained in the is added to the cache, so that it can then be used to acquire another token on-behalf-of the /// same user in order to call to downstream APIs. @@ -22,7 +22,7 @@ internal interface ITokenAcquisitionInternal : ITokenAcquisition /// Scopes to request. /// A that represents a completed add to cache operation. /// - /// From the configuration of the Authentication of the ASP.NET Core Web API: + /// From the configuration of the Authentication of the ASP.NET Core web API: /// OpenIdConnectOptions options; /// /// Subscribe to the authorization code received event: diff --git a/src/Microsoft.Identity.Web/IncrementalConsentAndConditionalAccessHelper.cs b/src/Microsoft.Identity.Web/IncrementalConsentAndConditionalAccessHelper.cs index 28396a83b..9a601fbeb 100644 --- a/src/Microsoft.Identity.Web/IncrementalConsentAndConditionalAccessHelper.cs +++ b/src/Microsoft.Identity.Web/IncrementalConsentAndConditionalAccessHelper.cs @@ -13,7 +13,7 @@ namespace Microsoft.Identity.Web { /// /// Helper methods to handle incremental consent and conditional access in - /// a Web app. + /// a web app. /// internal static class IncrementalConsentAndConditionalAccessHelper { diff --git a/src/Microsoft.Identity.Web/Microsoft.Identity.Web.csproj b/src/Microsoft.Identity.Web/Microsoft.Identity.Web.csproj index 8e51bb8ea..aedf69711 100644 --- a/src/Microsoft.Identity.Web/Microsoft.Identity.Web.csproj +++ b/src/Microsoft.Identity.Web/Microsoft.Identity.Web.csproj @@ -14,7 +14,7 @@ Microsoft Corporation Microsoft Identity Web - This package enables ASP.NET Core Web apps and Web APIs to use the Microsoft identity platform (formerly Azure AD v2.0). + This package enables ASP.NET Core web apps and web APIs to use the Microsoft identity platform (formerly Azure AD v2.0). This package is specifically used for web applications, which sign-in users, and protected web APIs, which optionally call downstream web APIs. © Microsoft Corporation. All rights reserved. diff --git a/src/Microsoft.Identity.Web/MicrosoftIdentityBaseAuthenticationBuilder.cs b/src/Microsoft.Identity.Web/MicrosoftIdentityBaseAuthenticationBuilder.cs index 5d4d2a640..68b179527 100644 --- a/src/Microsoft.Identity.Web/MicrosoftIdentityBaseAuthenticationBuilder.cs +++ b/src/Microsoft.Identity.Web/MicrosoftIdentityBaseAuthenticationBuilder.cs @@ -7,7 +7,7 @@ namespace Microsoft.Identity.Web { /// - /// Base class for Web app and Web API Microsoft Identity authentication + /// Base class for web app and web API Microsoft Identity authentication /// builders. /// public abstract class MicrosoftIdentityBaseAuthenticationBuilder diff --git a/src/Microsoft.Identity.Web/MicrosoftIdentityOptions.cs b/src/Microsoft.Identity.Web/MicrosoftIdentityOptions.cs index 5731c6fd1..38f15577c 100644 --- a/src/Microsoft.Identity.Web/MicrosoftIdentityOptions.cs +++ b/src/Microsoft.Identity.Web/MicrosoftIdentityOptions.cs @@ -67,7 +67,7 @@ internal bool HasClientCredentials } /// - /// Description of the certificates used to prove the identity of the Web app or Web API. + /// Description of the certificates used to prove the identity of the web app or web API. /// For the moment only the first certificate is considered. /// /// An example in the appsetting.json: @@ -85,7 +85,7 @@ internal bool HasClientCredentials public IEnumerable? ClientCertificates { get; set; } /// - /// Description of the certificates used to decrypt an encrypted token in a Web API. + /// Description of the certificates used to decrypt an encrypted token in a web API. /// For the moment only the first certificate is considered. /// /// An example in the appsetting.json: diff --git a/src/Microsoft.Identity.Web/MigrationAid/MicrosoftIdentityWebApiServiceCollectionExtensions.cs b/src/Microsoft.Identity.Web/MigrationAid/MicrosoftIdentityWebApiServiceCollectionExtensions.cs index 1ba518a41..49f64f22b 100644 --- a/src/Microsoft.Identity.Web/MigrationAid/MicrosoftIdentityWebApiServiceCollectionExtensions.cs +++ b/src/Microsoft.Identity.Web/MigrationAid/MicrosoftIdentityWebApiServiceCollectionExtensions.cs @@ -11,7 +11,7 @@ namespace Microsoft.Identity.Web { /// - /// Extension for IServiceCollection for startup initialization of Web APIs. + /// Extension for IServiceCollection for startup initialization of web APIs. /// public static partial class MicrosoftIdentityWebApiServiceCollectionExtensions { diff --git a/src/Microsoft.Identity.Web/Resource/IOpenIdConnectMiddlewareDiagnostics.cs b/src/Microsoft.Identity.Web/Resource/IOpenIdConnectMiddlewareDiagnostics.cs index dcaf98b16..75476ff7d 100644 --- a/src/Microsoft.Identity.Web/Resource/IOpenIdConnectMiddlewareDiagnostics.cs +++ b/src/Microsoft.Identity.Web/Resource/IOpenIdConnectMiddlewareDiagnostics.cs @@ -7,7 +7,7 @@ namespace Microsoft.Identity.Web.Resource { /// /// Diagnostics used in the OpenID Connect middleware - /// (used in Web Apps). + /// (used in web apps). /// public interface IOpenIdConnectMiddlewareDiagnostics { diff --git a/src/Microsoft.Identity.Web/Resource/JwtBearerMiddlewareDiagnostics.cs b/src/Microsoft.Identity.Web/Resource/JwtBearerMiddlewareDiagnostics.cs index 50c0eae83..952b610d6 100644 --- a/src/Microsoft.Identity.Web/Resource/JwtBearerMiddlewareDiagnostics.cs +++ b/src/Microsoft.Identity.Web/Resource/JwtBearerMiddlewareDiagnostics.cs @@ -10,7 +10,7 @@ namespace Microsoft.Identity.Web.Resource { /// - /// Diagnostics for the JwtBearer middleware (used in Web APIs). + /// Diagnostics for the JwtBearer middleware (used in web APIs). /// public class JwtBearerMiddlewareDiagnostics : IJwtBearerMiddlewareDiagnostics { diff --git a/src/Microsoft.Identity.Web/Resource/OpenIdConnectMiddlewareDiagnostics.cs b/src/Microsoft.Identity.Web/Resource/OpenIdConnectMiddlewareDiagnostics.cs index 493af9ba6..03b0f9783 100644 --- a/src/Microsoft.Identity.Web/Resource/OpenIdConnectMiddlewareDiagnostics.cs +++ b/src/Microsoft.Identity.Web/Resource/OpenIdConnectMiddlewareDiagnostics.cs @@ -12,7 +12,7 @@ namespace Microsoft.Identity.Web.Resource { /// /// Diagnostics used in the OpenID Connect middleware - /// (used in Web Apps). + /// (used in web apps). /// public class OpenIdConnectMiddlewareDiagnostics : IOpenIdConnectMiddlewareDiagnostics { diff --git a/src/Microsoft.Identity.Web/Resource/RegisterValidAudience.cs b/src/Microsoft.Identity.Web/Resource/RegisterValidAudience.cs index f7dfe00d2..565bd02e5 100644 --- a/src/Microsoft.Identity.Web/Resource/RegisterValidAudience.cs +++ b/src/Microsoft.Identity.Web/Resource/RegisterValidAudience.cs @@ -34,18 +34,18 @@ public void RegisterAudienceValidation( /// /// Default validation of the audience: - /// - when registering an Azure AD Web API in the app registration portal (and adding a scope) + /// - when registering an Azure AD web API in the app registration portal (and adding a scope) /// the default App ID URI generated by the portal is api://{clientID} - /// - However, the audience (aud) of the token acquired to access this Web API is different depending - /// on the "accepted access token version" for the Web API: + /// - However, the audience (aud) of the token acquired to access this web API is different depending + /// on the "accepted access token version" for the web API: /// - if accepted token version is 1.0, the audience provided in the token /// by the Microsoft identity platform (formerly Azure AD v2.0) endpoint is: api://{ClientID} /// - if the accepted token version is 2.0, the audience provided by Azure AD v2.0 in the token /// is {CliendID} - /// When getting an access token for an Azure AD B2C Web API the audience in the token is + /// When getting an access token for an Azure AD B2C web API the audience in the token is /// api://{ClientID}. /// - /// When Web API developers don't provide the "Audience" in the configuration, Microsoft.Identity.Web + /// When web API developers don't provide the "Audience" in the configuration, Microsoft.Identity.Web /// considers that this is the default App ID URI as explained above. When developer provides the /// "Audience" member, it's available in the TokenValidationParameter.ValidAudience. /// diff --git a/src/Microsoft.Identity.Web/Resource/RolesRequiredHttpContextExtensions.cs b/src/Microsoft.Identity.Web/Resource/RolesRequiredHttpContextExtensions.cs index 3f4ed2c19..30c1ade5a 100644 --- a/src/Microsoft.Identity.Web/Resource/RolesRequiredHttpContextExtensions.cs +++ b/src/Microsoft.Identity.Web/Resource/RolesRequiredHttpContextExtensions.cs @@ -14,7 +14,7 @@ namespace Microsoft.Identity.Web.Resource { /// /// Extension class providing the extension methods for that - /// can be used in Web APIs to validate the roles in controller actions. + /// can be used in web APIs to validate the roles in controller actions. /// public static class RolesRequiredHttpContextExtensions { diff --git a/src/Microsoft.Identity.Web/Resource/ScopesRequiredHttpContextExtensions.cs b/src/Microsoft.Identity.Web/Resource/ScopesRequiredHttpContextExtensions.cs index 6ab942952..6b8ec9271 100644 --- a/src/Microsoft.Identity.Web/Resource/ScopesRequiredHttpContextExtensions.cs +++ b/src/Microsoft.Identity.Web/Resource/ScopesRequiredHttpContextExtensions.cs @@ -13,7 +13,7 @@ namespace Microsoft.Identity.Web.Resource { /// /// Extension class providing the extension methods for that - /// can be used in Web APIs to validate scopes in controller actions. + /// can be used in web APIs to validate scopes in controller actions. /// public static class ScopesRequiredHttpContextExtensions { diff --git a/src/Microsoft.Identity.Web/ServiceCollectionExtensions.cs b/src/Microsoft.Identity.Web/ServiceCollectionExtensions.cs index 4b1f0bed9..9b4861b37 100644 --- a/src/Microsoft.Identity.Web/ServiceCollectionExtensions.cs +++ b/src/Microsoft.Identity.Web/ServiceCollectionExtensions.cs @@ -8,7 +8,7 @@ namespace Microsoft.Identity.Web { /// - /// Extensions for IServiceCollection for startup initialization of Web APIs. + /// Extensions for IServiceCollection for startup initialization of web APIs. /// public static class ServiceCollectionExtensions { diff --git a/src/Microsoft.Identity.Web/TokenAcquisition.cs b/src/Microsoft.Identity.Web/TokenAcquisition.cs index 88fc570af..c02af691d 100644 --- a/src/Microsoft.Identity.Web/TokenAcquisition.cs +++ b/src/Microsoft.Identity.Web/TokenAcquisition.cs @@ -103,7 +103,7 @@ public TokenAcquisition( /// The context used when an 'AuthorizationCode' is received over the OpenIdConnect protocol. /// scopes to request access to. /// - /// From the configuration of the Authentication of the ASP.NET Core Web API: + /// From the configuration of the Authentication of the ASP.NET Core web API: /// OpenIdConnectOptions options; /// /// Subscribe to the authorization code received event: @@ -171,20 +171,20 @@ public async Task AddAccountToCacheFromAuthorizationCodeAsync( } /// - /// Typically used from a Web App or WebAPI controller, this method retrieves an access token + /// Typically used from a web app or web API controller, this method retrieves an access token /// for a downstream API using; - /// 1) the token cache (for Web Apps and Web APIs) if a token exists in the cache + /// 1) the token cache (for web apps and web APIs) if a token exists in the cache /// 2) or the on-behalf-of flow - /// in Web APIs, for the user account that is ascertained from claims are provided in the + /// in web APIs, for the user account that is ascertained from claims are provided in the /// instance of the current HttpContext. /// /// Scopes to request for the downstream API to call. /// Enables overriding of the tenant/account for the same identity. This is useful in the /// cases where a given account is a guest in other tenants, and you want to acquire tokens for a specific tenant, like where the user is a guest in. /// An access token to call the downstream API and populated with this downstream API's scopes. - /// Calling this method from a Web API supposes that you have previously called, + /// Calling this method from a web API supposes that you have previously called, /// in a method called by JwtBearerOptions.Events.OnTokenValidated, the HttpContextExtensions.StoreTokenUsedToCallWebAPI method - /// passing the validated token (as a JwtSecurityToken). Calling it from a Web App supposes that + /// passing the validated token (as a JwtSecurityToken). Calling it from a web app supposes that /// you have previously called AddAccountToCacheFromAuthorizationCodeAsync from a method called by /// OpenIdConnectOptions.Events.OnAuthorizationCodeReceived. [Obsolete("This method has been deprecated, please use the GetAccessTokenForUserAsync() method instead.")] @@ -196,11 +196,11 @@ public async Task GetAccessTokenOnBehalfOfUserAsync( } /// - /// Typically used from a Web App or WebAPI controller, this method retrieves an access token + /// Typically used from a web app or web API controller, this method retrieves an access token /// for a downstream API using; - /// 1) the token cache (for Web Apps and Web APis) if a token exists in the cache + /// 1) the token cache (for web apps and web APis) if a token exists in the cache /// 2) or the on-behalf-of flow - /// in Web APIs, for the user account that is ascertained from claims are provided in the + /// in web APIs, for the user account that is ascertained from claims are provided in the /// instance of the current HttpContext. /// /// Scopes to request for the downstream API to call. @@ -208,12 +208,12 @@ public async Task GetAccessTokenOnBehalfOfUserAsync( /// cases where a given account is guest in other tenants, and you want to acquire tokens for a specific tenant, like where the user is a guest in. /// Azure AD B2C user flow to target. /// Optional claims principal representing the user. If not provided, will use the signed-in - /// user (in a web app), or the user for which the token was received (in a Web API) + /// user (in a web app), or the user for which the token was received (in a web API) /// cases where a given account is guest in other tenants, and you want to acquire tokens for a specific tenant, like where the user is a guest in. /// An access token to call the downstream API and populated with this downstream API's scopes. /// Calling this method from a web API supposes that you have previously called, /// in a method called by JwtBearerOptions.Events.OnTokenValidated, the HttpContextExtensions.StoreTokenUsedToCallWebAPI method - /// passing the validated token (as a JwtSecurityToken). Calling it from a Web App supposes that + /// passing the validated token (as a JwtSecurityToken). Calling it from a web app supposes that /// you have previously called AddAccountToCacheFromAuthorizationCodeAsync from a method called by /// OpenIdConnectOptions.Events.OnAuthorizationCodeReceived. public async Task GetAccessTokenForUserAsync( @@ -257,10 +257,10 @@ public async Task GetAccessTokenForUserAsync( } catch (MsalUiRequiredException ex) { - // GetAccessTokenForUserAsync is an abstraction that can be called from a Web App or a Web API + // GetAccessTokenForUserAsync is an abstraction that can be called from a web app or a web API _logger.LogInformation(ex.Message); - // Case of the Web App: we let the MsalUiRequiredException be caught by the + // Case of the web app: we let the MsalUiRequiredException be caught by the // AuthorizeForScopesAttribute exception filter so that the user can consent, do 2FA, etc ... throw new MicrosoftIdentityWebChallengeUserException(ex, scopes.ToArray(), userFlow); } diff --git a/src/Microsoft.Identity.Web/WebApiExtensions/MicrosoftIdentityWebApiAuthenticationBuilderExtensions.cs b/src/Microsoft.Identity.Web/WebApiExtensions/MicrosoftIdentityWebApiAuthenticationBuilderExtensions.cs index 58a975e8e..95744581d 100644 --- a/src/Microsoft.Identity.Web/WebApiExtensions/MicrosoftIdentityWebApiAuthenticationBuilderExtensions.cs +++ b/src/Microsoft.Identity.Web/WebApiExtensions/MicrosoftIdentityWebApiAuthenticationBuilderExtensions.cs @@ -100,7 +100,7 @@ public static MicrosoftIdentityWebApiAuthenticationBuilderWithConfiguration AddM } /// - /// Protects the Web API with Microsoft identity platform (formerly Azure AD v2.0). + /// Protects the web API with Microsoft identity platform (formerly Azure AD v2.0). /// /// The to which to add this configuration. /// The action to configure . @@ -176,7 +176,7 @@ private static void AddMicrosoftIdentityWebApiImplementation( options.Authority = AuthorityHelpers.BuildAuthority(microsoftIdentityOptions); } - // This is a Microsoft identity platform Web API + // This is a Microsoft identity platform web API options.Authority = AuthorityHelpers.EnsureAuthorityIsV2(options.Authority); options.TokenValidationParameters = options.TokenValidationParameters.Clone(); @@ -211,12 +211,12 @@ private static void AddMicrosoftIdentityWebApiImplementation( options.Events = new JwtBearerEvents(); } - // When an access token for our own Web API is validated, we add it to MSAL.NET's cache so that it can + // When an access token for our own web API is validated, we add it to MSAL.NET's cache so that it can // be used from the controllers. var tokenValidatedHandler = options.Events.OnTokenValidated; options.Events.OnTokenValidated = async context => { - // This check is required to ensure that the Web API only accepts tokens from tenants where it has been consented and provisioned. + // This check is required to ensure that the web API only accepts tokens from tenants where it has been consented and provisioned. if (!context.Principal.Claims.Any(x => x.Type == ClaimConstants.Scope) && !context.Principal.Claims.Any(y => y.Type == ClaimConstants.Scp) && !context.Principal.Claims.Any(y => y.Type == ClaimConstants.Roles) @@ -270,7 +270,7 @@ public static MicrosoftIdentityWebApiAuthenticationBuilderWithConfiguration AddM } /// - /// Protects the Web API with Microsoft identity platform (formerly Azure AD v2.0). + /// Protects the web API with Microsoft identity platform (formerly Azure AD v2.0). /// /// The to which to add this configuration. /// The action to configure . diff --git a/src/Microsoft.Identity.Web/WebApiExtensions/MicrosoftIdentityWebApiAuthenticationBuilderWithConfiguration.cs b/src/Microsoft.Identity.Web/WebApiExtensions/MicrosoftIdentityWebApiAuthenticationBuilderWithConfiguration.cs index 3ad582ba8..cc38429c7 100644 --- a/src/Microsoft.Identity.Web/WebApiExtensions/MicrosoftIdentityWebApiAuthenticationBuilderWithConfiguration.cs +++ b/src/Microsoft.Identity.Web/WebApiExtensions/MicrosoftIdentityWebApiAuthenticationBuilderWithConfiguration.cs @@ -9,7 +9,7 @@ namespace Microsoft.Identity.Web { /// - /// Builder for Web API authentication with configuration. + /// Builder for web API authentication with configuration. /// public class MicrosoftIdentityWebApiAuthenticationBuilderWithConfiguration : MicrosoftIdentityWebApiAuthenticationBuilder { diff --git a/src/Microsoft.Identity.Web/WebApiExtensions/MicrosoftIdentityWebApiServiceCollectionExtensions.cs b/src/Microsoft.Identity.Web/WebApiExtensions/MicrosoftIdentityWebApiServiceCollectionExtensions.cs index b9e42b2db..1f8c4236a 100644 --- a/src/Microsoft.Identity.Web/WebApiExtensions/MicrosoftIdentityWebApiServiceCollectionExtensions.cs +++ b/src/Microsoft.Identity.Web/WebApiExtensions/MicrosoftIdentityWebApiServiceCollectionExtensions.cs @@ -9,7 +9,7 @@ namespace Microsoft.Identity.Web { /// - /// Extension for IServiceCollection for startup initialization of Web APIs. + /// Extension for IServiceCollection for startup initialization of web APIs. /// public static partial class MicrosoftIdentityWebApiServiceCollectionExtensions { diff --git a/src/Microsoft.Identity.Web/WebAppExtensions/MicrosoftIdentityWebAppAuthenticationBuilder.cs b/src/Microsoft.Identity.Web/WebAppExtensions/MicrosoftIdentityWebAppAuthenticationBuilder.cs index 45abddeb5..b1e2d6122 100644 --- a/src/Microsoft.Identity.Web/WebAppExtensions/MicrosoftIdentityWebAppAuthenticationBuilder.cs +++ b/src/Microsoft.Identity.Web/WebAppExtensions/MicrosoftIdentityWebAppAuthenticationBuilder.cs @@ -47,7 +47,7 @@ internal MicrosoftIdentityWebAppAuthenticationBuilder( private string OpenIdConnectScheme { get; set; } /// - /// The Web app calls a Web API. This override enables you to specify the + /// The web app calls a web API. This override enables you to specify the /// ConfidentialClientApplicationOptions (from MSAL.NET) programmatically. /// /// Action to configure the diff --git a/src/Microsoft.Identity.Web/WebAppExtensions/MicrosoftIdentityWebAppAuthenticationBuilderExtensions.cs b/src/Microsoft.Identity.Web/WebAppExtensions/MicrosoftIdentityWebAppAuthenticationBuilderExtensions.cs index 9c11a15a7..e9e6c86bf 100644 --- a/src/Microsoft.Identity.Web/WebAppExtensions/MicrosoftIdentityWebAppAuthenticationBuilderExtensions.cs +++ b/src/Microsoft.Identity.Web/WebAppExtensions/MicrosoftIdentityWebAppAuthenticationBuilderExtensions.cs @@ -249,7 +249,7 @@ private static void AddMicrosoftIdentityWebAppInternal( options.Authority = AuthorityHelpers.BuildAuthority(microsoftIdentityOptions.Value); } - // This is a Microsoft identity platform Web app + // This is a Microsoft identity platform web app options.Authority = AuthorityHelpers.EnsureAuthorityIsV2(options.Authority); options.TokenValidationParameters = options.TokenValidationParameters.Clone();