We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 0c5c807 commit cb1b500Copy full SHA for cb1b500
msal/application.py
@@ -554,7 +554,9 @@ def acquire_token_silent_with_error(
554
for alias in self._get_authority_aliases(self.authority.instance):
555
if not self.token_cache.find(
556
self.token_cache.CredentialType.REFRESH_TOKEN,
557
- target=scopes,
+ # target=scopes, # MUST NOT filter by scopes, because:
558
+ # 1. AAD RTs are scope-independent;
559
+ # 2. therefore target is optional per schema;
560
query={"environment": alias}):
561
# Skip heavy weight logic when RT for this alias doesn't exist
562
continue
0 commit comments