Pull requests

• Revert deprecation of ResponseMode.QUERY in system browser auth flow

  #1074·Sébastien Nussbaumer (snussbaumer) opened Sep 28, 2026·

  ·
  2

• Add Bearer-over-mTLS assertions for confidential clients

  #1072·Robbie-Microsoft opened Sep 25, 2026Contributor··

  ·

• Add non-exportable SNI mTLS PoP E2E coverage

  #1071·Robbie-Microsoft opened Sep 25, 2026Contributor··

  ·

• Add confidential client mTLS PoP foundation

  #1070·Robbie-Microsoft opened Sep 25, 2026Contributor··

  ·

• Create SECURITY.md

  #1064·ahmedadelelghobashy-max opened Sep 8, 2026·

  ·
  2

• Add Managed Identity v2 KeyGuard mTLS PoP support

  #1059·Gladwin Johnson VR (gladjohn) opened Aug 16, 2026Contributor·

  ·
  68

• Add FIC Leg 2 over mTLS Proof-of-Possession (stacked on #1040)

  #1041·Robbie-Microsoft opened Jul 6, 2026Contributor·

  ·
  22

• Implement mTLS Proof-of-Possession (mTLS PoP) token acquisition

  #1021·Robbie-Microsoft opened Apr 8, 2026Contributor·

  ·
  4

• Implement retryable call to withstand Connection reset, Connection refused, 503 Service not available when MSAL4J is used behind proxy

  #936·JozefDropco opened Apr 10, 2025·

  ·
  2

• Use path of the redirect URI

  #892·ErRijcken opened Dec 24, 2024·

  ·
  1