Configure ReplyUri for AuthorizationCodeCredential

[christothes]

fixes #21529

[sergeyzwezdin]

@christothes has this change already published to nuget?

[christothes]

Yes, it is 1.5.0-beta.1
https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/identity/Azure.Identity/CHANGELOG.md#fixes-and-improvements

[dmitry-pavlov]

BTW @christothes, did you see this comment on your commit?

[christothes]

BTW @christothes, did you see this comment on your commit?

Thanks for pointing this out - I missed this. It appears that this is indeed a bug. I'll look into this further.

[dmitry-pavlov]

@christothes btw what is considered to be the auth code?

Something like this:

M.R3_BL2.c6eeb0f9-e201-13bc-c3fb-3dc650343e93

or longer text we are getting when requesting auth code like this:

M.R3_BL2.c6eeb0f9-e201-13bc-c3fb-3dc650343e93&client_info=eyJ2ZXIiOiIxLjA...wNGI2NmRhZCJ9&state=eyJpZCI6I..fX0%3d

[dmitry-pavlov]

Thanks for pointing this out - I missed this. It appears that this is indeed a bug. I'll look into this further.

@christothes do you have in mind any estimates on when this could be published as some other beta package?

I see you have created PR 24182 to fix that. I hope it will be included to 1.5.0-beta.5. Just curious when it is going to happen.

[christothes]

It will be released next month

[sergeyzwezdin]

@christothes I've tried to provide RedirectUri to IConfidentialClientApplication while debugging the app, but it still doesn't work, it fails with the following issue:

AuthorizationCodeCredential authentication failed: AADSTS70000: The provided 'code_verifier' input value does not match the original 'code_challenge.'

Seems PR #24182 doesn't fix the issue. Did you try with real code, not just with unit test?

[christothes]

IConfidentialClientApplication is an MSAL type. Are you saying that outside the context of Azure.Identity, RedirecyUri doesn't work in MSAL? Do you have a code snippet of what you are doing?

[sergeyzwezdin]

What I actually did is added breakpoint in the code and set RedirectUri by hands during debug, then run the app next. Previously I had the error that redirect_uri is incorrect, now it's about code_verifier and code_challenge.

[christothes]

Would you mind providing a simple repro scenario on this issue and continue the conversation there? #24183

[sergeyzwezdin]

It's a bit hard to reproduce. If I will be able to create separate repo, I'll add link there.