Add V1/V2 STS token remarks (#655)

guardrex · web-flow · commit f4d75cab42fb · 2026-04-10T08:32:37.000-04:00
diff --git a/10.0/BlazorWebAppEntraBff/MinimalApiJwt/Program.cs b/10.0/BlazorWebAppEntraBff/MinimalApiJwt/Program.cs
@@ -10,9 +10,11 @@
         //
         // Authority format {AUTHORITY} matches the issurer (`iss`) of the JWT returned by the identity provider.
         //
-        // Authority format {AUTHORITY} for ME-ID tenant type: https://sts.windows.net/{TENANT ID}
+        // Authority format {AUTHORITY} for ME-ID tenant type (V1 STS token): https://sts.windows.net/{TENANT ID}
         // Authority format {AUTHORITY} for ME External ID tenant type: https://{DIRECTORY NAME}.ciamlogin.com/{TENANT ID}/v2.0
         // Authority format {AUTHORITY} for B2C tenant type: https://login.microsoftonline.com/{TENANT ID}/v2.0
+        // The format of the authority URL depends on the tenant type and the version of the tokens issued by the identity provider.
+        // For guidance on adopting V2 tokens and the corresponding authority URL format, see the article.
         //
         jwtOptions.Authority = "{AUTHORITY}";
         //
diff --git a/10.0/BlazorWebAppEntraBffYarpAspire/MinimalApiJwt/Program.cs b/10.0/BlazorWebAppEntraBffYarpAspire/MinimalApiJwt/Program.cs
@@ -10,9 +10,11 @@
         //
         // Authority format {AUTHORITY} matches the issurer (`iss`) of the JWT returned by the identity provider.
         //
-        // Authority format {AUTHORITY} for ME-ID tenant type: https://sts.windows.net/{TENANT ID}
+        // Authority format {AUTHORITY} for ME-ID tenant type (V1 STS token): https://sts.windows.net/{TENANT ID}
         // Authority format {AUTHORITY} for ME External ID tenant type: https://{DIRECTORY NAME}.ciamlogin.com/{TENANT ID}/v2.0
         // Authority format {AUTHORITY} for B2C tenant type: https://login.microsoftonline.com/{TENANT ID}/v2.0
+        // The format of the authority URL depends on the tenant type and the version of the tokens issued by the identity provider.
+        // For guidance on adopting V2 tokens and the corresponding authority URL format, see the article.
         //
         jwtOptions.Authority = "{AUTHORITY}";
 
diff --git a/10.0/BlazorWebAppOidcBffAuto/MinimalApiJwt/Program.cs b/10.0/BlazorWebAppOidcBffAuto/MinimalApiJwt/Program.cs
@@ -7,9 +7,11 @@
         //
         // Authority format {AUTHORITY} matches the issurer (`iss`) of the JWT returned by the identity provider.
         //
-        // Authority format {AUTHORITY} for ME-ID tenant type: https://sts.windows.net/{TENANT ID}
+        // Authority format {AUTHORITY} for ME-ID tenant type (V1 STS token): https://sts.windows.net/{TENANT ID}
         // Authority format {AUTHORITY} for ME External ID tenant type: https://{DIRECTORY NAME}.ciamlogin.com/{TENANT ID}/v2.0
         // Authority format {AUTHORITY} for B2C tenant type: https://login.microsoftonline.com/{TENANT ID}/v2.0
+        // The format of the authority URL depends on the tenant type and the version of the tokens issued by the identity provider.
+        // For guidance on adopting V2 tokens and the corresponding authority URL format, see the article.
         //
         jwtOptions.Authority = "{AUTHORITY}";
         //
diff --git a/10.0/BlazorWebAppOidcBffServer/MinimalApiJwt/Program.cs b/10.0/BlazorWebAppOidcBffServer/MinimalApiJwt/Program.cs
@@ -7,9 +7,11 @@
         //
         // Authority format {AUTHORITY} matches the issurer (`iss`) of the JWT returned by the identity provider.
         //
-        // Authority format {AUTHORITY} for ME-ID tenant type: https://sts.windows.net/{TENANT ID}
+        // Authority format {AUTHORITY} for ME-ID tenant type (V1 STS token): https://sts.windows.net/{TENANT ID}
         // Authority format {AUTHORITY} for ME External ID tenant type: https://{DIRECTORY NAME}.ciamlogin.com/{TENANT ID}/v2.0
         // Authority format {AUTHORITY} for B2C tenant type: https://login.microsoftonline.com/{TENANT ID}/v2.0
+        // The format of the authority URL depends on the tenant type and the version of the tokens issued by the identity provider.
+        // For guidance on adopting V2 tokens and the corresponding authority URL format, see the article.
         //
         jwtOptions.Authority = "{AUTHORITY}";
         //
diff --git a/8.0/BlazorWebAppOidc/MinimalApiJwt/Program.cs b/8.0/BlazorWebAppOidc/MinimalApiJwt/Program.cs
@@ -7,9 +7,11 @@
         //
         // Authority format {AUTHORITY} matches the issurer (`iss`) of the JWT returned by the identity provider.
         //
-        // Authority format {AUTHORITY} for ME-ID tenant type: https://sts.windows.net/{TENANT ID}
+        // Authority format {AUTHORITY} for ME-ID tenant type (V1 STS token): https://sts.windows.net/{TENANT ID}
         // Authority format {AUTHORITY} for ME External ID tenant type: https://{DIRECTORY NAME}.ciamlogin.com/{TENANT ID}/v2.0
         // Authority format {AUTHORITY} for B2C tenant type: https://login.microsoftonline.com/{TENANT ID}/v2.0
+        // The format of the authority URL depends on the tenant type and the version of the tokens issued by the identity provider.
+        // For guidance on adopting V2 tokens and the corresponding authority URL format, see the article.
         //
         jwtOptions.Authority = "{AUTHORITY}";
         //
diff --git a/8.0/BlazorWebAppOidcBff/MinimalApiJwt/Program.cs b/8.0/BlazorWebAppOidcBff/MinimalApiJwt/Program.cs
@@ -10,9 +10,11 @@
         //
         // Authority format {AUTHORITY} matches the issurer (`iss`) of the JWT returned by the identity provider.
         //
-        // Authority format {AUTHORITY} for ME-ID tenant type: https://sts.windows.net/{TENANT ID}
+        // Authority format {AUTHORITY} for ME-ID tenant type (V1 STS token): https://sts.windows.net/{TENANT ID}
         // Authority format {AUTHORITY} for ME External ID tenant type: https://{DIRECTORY NAME}.ciamlogin.com/{TENANT ID}/v2.0
         // Authority format {AUTHORITY} for B2C tenant type: https://login.microsoftonline.com/{TENANT ID}/v2.0
+        // The format of the authority URL depends on the tenant type and the version of the tokens issued by the identity provider.
+        // For guidance on adopting V2 tokens and the corresponding authority URL format, see the article.
         //
         jwtOptions.Authority = "{AUTHORITY}";
         //
diff --git a/8.0/BlazorWebAppOidcServer/MinimalApiJwt/Program.cs b/8.0/BlazorWebAppOidcServer/MinimalApiJwt/Program.cs
@@ -7,9 +7,11 @@
         //
         // Authority format {AUTHORITY} matches the issurer (`iss`) of the JWT returned by the identity provider.
         //
-        // Authority format {AUTHORITY} for ME-ID tenant type: https://sts.windows.net/{TENANT ID}
+        // Authority format {AUTHORITY} for ME-ID tenant type (V1 STS token): https://sts.windows.net/{TENANT ID}
         // Authority format {AUTHORITY} for ME External ID tenant type: https://{DIRECTORY NAME}.ciamlogin.com/{TENANT ID}/v2.0
         // Authority format {AUTHORITY} for B2C tenant type: https://login.microsoftonline.com/{TENANT ID}/v2.0
+        // The format of the authority URL depends on the tenant type and the version of the tokens issued by the identity provider.
+        // For guidance on adopting V2 tokens and the corresponding authority URL format, see the article.
         //
         jwtOptions.Authority = "{AUTHORITY}";
         //
diff --git a/9.0/BlazorWebAppEntraBff/MinimalApiJwt/Program.cs b/9.0/BlazorWebAppEntraBff/MinimalApiJwt/Program.cs
@@ -7,9 +7,11 @@
         //
         // Authority format {AUTHORITY} matches the issurer (`iss`) of the JWT returned by the identity provider.
         //
-        // Authority format {AUTHORITY} for ME-ID tenant type: https://sts.windows.net/{TENANT ID}
+        // Authority format {AUTHORITY} for ME-ID tenant type (V1 STS token): https://sts.windows.net/{TENANT ID}
         // Authority format {AUTHORITY} for ME External ID tenant type: https://{DIRECTORY NAME}.ciamlogin.com/{TENANT ID}/v2.0
         // Authority format {AUTHORITY} for B2C tenant type: https://login.microsoftonline.com/{TENANT ID}/v2.0
+        // The format of the authority URL depends on the tenant type and the version of the tokens issued by the identity provider.
+        // For guidance on adopting V2 tokens and the corresponding authority URL format, see the article.
         //
         jwtOptions.Authority = "{AUTHORITY}";
         //
diff --git a/9.0/BlazorWebAppEntraBffYarpAspire/MinimalApiJwt/Program.cs b/9.0/BlazorWebAppEntraBffYarpAspire/MinimalApiJwt/Program.cs
@@ -10,9 +10,11 @@
         //
         // Authority format {AUTHORITY} matches the issurer (`iss`) of the JWT returned by the identity provider.
         //
-        // Authority format {AUTHORITY} for ME-ID tenant type: https://sts.windows.net/{TENANT ID}
+        // Authority format {AUTHORITY} for ME-ID tenant type (V1 STS token): https://sts.windows.net/{TENANT ID}
         // Authority format {AUTHORITY} for ME External ID tenant type: https://{DIRECTORY NAME}.ciamlogin.com/{TENANT ID}/v2.0
         // Authority format {AUTHORITY} for B2C tenant type: https://login.microsoftonline.com/{TENANT ID}/v2.0
+        // The format of the authority URL depends on the tenant type and the version of the tokens issued by the identity provider.
+        // For guidance on adopting V2 tokens and the corresponding authority URL format, see the article.
         //
         jwtOptions.Authority = "{AUTHORITY}";
         //
diff --git a/9.0/BlazorWebAppOidcBffAuto/MinimalApiJwt/Program.cs b/9.0/BlazorWebAppOidcBffAuto/MinimalApiJwt/Program.cs
@@ -7,9 +7,11 @@
         //
         // Authority format {AUTHORITY} matches the issurer (`iss`) of the JWT returned by the identity provider.
         //
-        // Authority format {AUTHORITY} for ME-ID tenant type: https://sts.windows.net/{TENANT ID}
+        // Authority format {AUTHORITY} for ME-ID tenant type (V1 STS token): https://sts.windows.net/{TENANT ID}
         // Authority format {AUTHORITY} for ME External ID tenant type: https://{DIRECTORY NAME}.ciamlogin.com/{TENANT ID}/v2.0
         // Authority format {AUTHORITY} for B2C tenant type: https://login.microsoftonline.com/{TENANT ID}/v2.0
+        // The format of the authority URL depends on the tenant type and the version of the tokens issued by the identity provider.
+        // For guidance on adopting V2 tokens and the corresponding authority URL format, see the article.
         //
         jwtOptions.Authority = "{AUTHORITY}";
         //
diff --git a/9.0/BlazorWebAppOidcBffAutoYarpAspire/MinimalApiJwt/Program.cs b/9.0/BlazorWebAppOidcBffAutoYarpAspire/MinimalApiJwt/Program.cs
@@ -10,9 +10,11 @@
         //
         // Authority format {AUTHORITY} matches the issurer (`iss`) of the JWT returned by the identity provider.
         //
-        // Authority format {AUTHORITY} for ME-ID tenant type: https://sts.windows.net/{TENANT ID}
+        // Authority format {AUTHORITY} for ME-ID tenant type (V1 STS token): https://sts.windows.net/{TENANT ID}
         // Authority format {AUTHORITY} for ME External ID tenant type: https://{DIRECTORY NAME}.ciamlogin.com/{TENANT ID}/v2.0
         // Authority format {AUTHORITY} for B2C tenant type: https://login.microsoftonline.com/{TENANT ID}/v2.0
+        // The format of the authority URL depends on the tenant type and the version of the tokens issued by the identity provider.
+        // For guidance on adopting V2 tokens and the corresponding authority URL format, see the article.
         //
         jwtOptions.Authority = "{AUTHORITY}";
         //
diff --git a/9.0/BlazorWebAppOidcBffServer/MinimalApiJwt/Program.cs b/9.0/BlazorWebAppOidcBffServer/MinimalApiJwt/Program.cs
@@ -7,9 +7,11 @@
         //
         // Authority format {AUTHORITY} matches the issurer (`iss`) of the JWT returned by the identity provider.
         //
-        // Authority format {AUTHORITY} for ME-ID tenant type: https://sts.windows.net/{TENANT ID}
+        // Authority format {AUTHORITY} for ME-ID tenant type (V1 STS token): https://sts.windows.net/{TENANT ID}
         // Authority format {AUTHORITY} for ME External ID tenant type: https://{DIRECTORY NAME}.ciamlogin.com/{TENANT ID}/v2.0
         // Authority format {AUTHORITY} for B2C tenant type: https://login.microsoftonline.com/{TENANT ID}/v2.0
+        // The format of the authority URL depends on the tenant type and the version of the tokens issued by the identity provider.
+        // For guidance on adopting V2 tokens and the corresponding authority URL format, see the article.
         //
         jwtOptions.Authority = "{AUTHORITY}";
         //
