Fix: Add tenant ID validation in `UserPrincipalManager`#49631

Merged

rujche merged 15 commits into

mainfrom

rujche/main/fix-icm-issue-about-UserPrincipalManager

Jun 29, 2026

Commits on Jun 25, 2026

Fix: Add tenant ID validation to prevent cross-tenant authentication bypass
rujche
committed
docs: Update CHANGELOG.md with tenant ID validation fix
rujche
committed
fix: Address Copilot review comments on tenant ID validation
rujche
committed
fix: Address security and naming review comments
rujche
committed
fix: Wrap long line to comply with 120-character Checkstyle LineLength rule
rujche
committed
refactor: Add package-private constructor to avoid reflective mutation of final fields
rujche
committed
fix: Fix import order to put com.azure imports before third-party imports
rujche
committed

Commits on Jun 26, 2026

Commits on Jun 29, 2026

refactor: Remove package-private UserPrincipalManager constructor and reflection in tests
rujche
committed