Download Latest Version 4.87.0 source code.zip (3.8 MB)
Email in envelope

Get an email when there's a new version of Microsoft Authentication Library .NET

Home / 4.86.1
Name Modified Size InfoDownloads / Week
Parent folder
4.86.1 source code.tar.gz 2026-07-15 2.7 MB
4.86.1 source code.zip 2026-07-15 3.7 MB
README.md 2026-07-15 992 Bytes
Totals: 3 Items   6.4 MB 2

Bug Fixes

  • Fixed the mTLS Proof-of-Possession token cache to key on the certificate's full DER (x5t#S256) instead of only the public key, preventing a stale token (and AADSTS500181) after a same-key certificate renewal. #6123
  • Fell back to RS256 when a certificate's PSS signing operation is rejected by RSACryptoServiceProvider, rebuilding the client assertion so authentication can proceed. #6126
  • Detect and reject symbolic links in the Unix cache-file write path (lstat pre-check plus O_NOFOLLOW), closing a TOCTOU window. #6115
  • Corrected misleading "region required" error messages and doc comments in the mTLS PoP flow. #6127
Source: README.md, updated 2026-07-15