AbstractConfidentialClientAcquireTokenParameterBuilder<T>.WithProofOfPossession Method

Definition

Modifies the token acquisition request so that the acquired token is a Proof-of-Possession token (PoP), rather than a Bearer token. PoP tokens are similar to Bearer tokens, but are bound to the HTTP request and to a cryptographic key, which MSAL can manage on Windows. See https://aka.ms/msal-net-pop

public T WithProofOfPossession (Microsoft.Identity.Client.AppConfig.PoPAuthenticationConfiguration popAuthenticationConfiguration);
member this.WithProofOfPossession : Microsoft.Identity.Client.AppConfig.PoPAuthenticationConfiguration -> 'T
Public Function WithProofOfPossession (popAuthenticationConfiguration As PoPAuthenticationConfiguration) As T

Parameters

popAuthenticationConfiguration
PoPAuthenticationConfiguration

Configuration properties used to construct a Proof-of-Possession request.

Returns

T

The builder.

Remarks

  • An Authentication header is automatically added to the request.
  • The PoP token is bound to the HTTP request, more specifically to the HTTP method (GET, POST, etc.) and to the Uri (path and query, but not query parameters).
  • MSAL creates, reads and stores a key in memory that will be cycled every 8 hours.
  • This is an experimental API. The method signature may change in the future without involving a major version upgrade.

Applies to