OwinTokenAcquirerFactory mangles OwinTokenAcquisitionHost scope

[Danthar]

Microsoft.Identity.Web Library

Microsoft.Identity.Web

Microsoft.Identity.Web version

3.6.0

Web app

Sign-in users and call web APIs

Web API

Protected web APIs call downstream web APIs

Token cache serialization

In-memory caches

Description

microsoft-identity-web/src/Microsoft.Identity.Web.OWIN/OwinTokenAcquirerFactory.cs

Line 55 in 990a2ba

if (tokenAcquisitionhost.Lifetime == ServiceLifetime.Singleton)

This looks like a bug. Im unsure what it should be, i think it should always be scoped and not singleton. But im pretty sure that this is not correct.

To be clear the link refers to a single line. but im saying the entire if statement is wrong.

Reproduction steps

Look at the code

Error message

No response

Id Web logs

No response

Relevant code snippets

follow the link

Regression

No response

Expected behavior