Sync live w/main

.github/workflows/linkvalidator.yml

@@ -16,6 +16,12 @@ jobs:
     steps:
       - uses: actions/checkout@v3
 
+      - name: Resolve root-relative links for checking
+        run: |
+          # Convert root-relative markdown links like [text](/path) to [text](https://learn.microsoft.com/path)
+          # so lychee can validate them. This only modifies the CI checkout copy.
+          find . -name '*.md' -exec sed -i -E 's|\]\(/|\](https://learn.microsoft.com/|g' {} +
+
       - name: Link Checker
         id: lychee
         uses: lycheeverse/lychee-action@master

msal-python-conceptual/advanced/migrate.md

@@ -25,7 +25,7 @@ and then when a new RT comes back, MSAL will store it in the usual way.
 As this method is intended for scenarios that are not typical, it is NOT readily accessible with the official API surface.
 You will have to call it via an internal helper `app.client`,
 and its naming convention is also slightly different than those other
-[official APIs]().
+[official APIs](../getting-started/acquiring-tokens.md).
 
 ```python
 from msal import PublicClientApplication

python/docs-ref-autogen/msal/msal.application.ConfidentialClientApplication.yml

@@ -358,7 +358,8 @@ methods:
     Since MSAL Python 1.23, it will automatically look for token from cache,
 
     and only send request to Identity Provider when cache misses.'
-  signature: acquire_token_for_client(scopes, claims_challenge=None, **kwargs)
+  signature: acquire_token_for_client(scopes, claims_challenge=None, fmi_path=None,
+    **kwargs)
   parameters:
   - name: scopes
     description: '(Required)
@@ -379,6 +380,19 @@ methods:
       It is a string of a JSON object which contains lists of claims being requested
       from these locations.'
     defaultValue: None
+  - name: fmi_path
+    description: "Optional. The Federated Managed Identity (FMI) credential path.\n\
+      When provided, it is sent as the `fmi_path` parameter in the\ntoken request\
+      \ body, and the resulting token is cached separately\nso that different FMI\
+      \ paths do not share cached tokens.\nExample usage:\n\n<!-- literal_block {\"\
+      ids\": [], \"classes\": [], \"names\": [], \"dupnames\": [], \"backrefs\": [],\
+      \ \"xml:space\": \"preserve\", \"language\": \"default\", \"force\": false,\
+      \ \"linenos\": false} -->\n\n````default\n\n   result = cca.acquire_token_for_client(\n\
+      \       scopes=[\"api://resource/.default\"],\n       fmi_path=\"SomeFmiPath/FmiCredentialPath\"\
+      ,\n   )\n   ````"
+    defaultValue: None
+    types:
+    - <xref:str>
   return:
     description: "A dict representing the json response from Microsoft Entra:\n\n\
       * A successful response would contain \"access_token\" key, \n\n* an error response\

python/docs-ref-autogen/msal/msal.sku.yml

@@ -2,4 +2,4 @@
 uid: msal.sku
 name: sku
 fullName: msal.sku
-summary: This module is from where we recieve the client sku name and version.
+summary: This module is from where we receive the client sku name and version.

python/docs-ref-autogen/msal/msal.token_cache.TokenCache.CredentialType.yml

@@ -9,6 +9,9 @@ attributes:
 - uid: msal.token_cache.TokenCache.CredentialType.ACCESS_TOKEN
   name: ACCESS_TOKEN
   signature: ACCESS_TOKEN = 'AccessToken'
+- uid: msal.token_cache.TokenCache.CredentialType.ACCESS_TOKEN_EXTENDED
+  name: ACCESS_TOKEN_EXTENDED
+  signature: ACCESS_TOKEN_EXTENDED = 'atext'
 - uid: msal.token_cache.TokenCache.CredentialType.ACCOUNT
   name: ACCOUNT
   signature: ACCOUNT = 'Account'

xrefmap.yml

@@ -2171,6 +2171,10 @@ references:
   href: https://docs.python.org/3/library/ctypes.html#ctypes._Pointer.contents
   name: contents
   uid: ctypes._Pointer.contents
+- fullName: ctypes._SimpleCData._type_
+  href: https://docs.python.org/3/library/ctypes.html#ctypes._SimpleCData._type_
+  name: _type_
+  uid: ctypes._SimpleCData._type_
 - fullName: ctypes._SimpleCData.value
   href: https://docs.python.org/3/library/ctypes.html#ctypes._SimpleCData.value
   name: value