Skip to content

Commit cb1b500

Browse files
committed
Now we can find scope-less RT from cache
1 parent 0c5c807 commit cb1b500

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

msal/application.py

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -554,7 +554,9 @@ def acquire_token_silent_with_error(
554554
for alias in self._get_authority_aliases(self.authority.instance):
555555
if not self.token_cache.find(
556556
self.token_cache.CredentialType.REFRESH_TOKEN,
557-
target=scopes,
557+
# target=scopes, # MUST NOT filter by scopes, because:
558+
# 1. AAD RTs are scope-independent;
559+
# 2. therefore target is optional per schema;
558560
query={"environment": alias}):
559561
# Skip heavy weight logic when RT for this alias doesn't exist
560562
continue

0 commit comments

Comments
 (0)