Added support for Token revocation support

[4gust]

PR Title: Add Token Revocation Handling and Enhanced Testing for App Service in Managed Identity

Description:
This PR introduces a new feature to handle token revocation scenarios in App Service managed identity and enhances testing to ensure robust behavior. The changes focus on handling claims challenges, bad access tokens from the cache, and validating client capabilities.

---

Changes:

Feature Implementation:

1. Token Revocation Handling:

   • Ensures that the client retries the request with the claims parameter included in the URL to obtain a fresh token.

2. Bad Access Token Handling:

   • Introduced logic to detect bad access tokens retrieved from the cache when claims are passed and ensures that a fresh token is acquired when necessary.

---

New Unit Tests:

1. TestAppServiceWithClaimsAndBadAccessToken

   • Validates the scenario when claims are passed, and a bad access token is retrieved from the cache.
   • Ensures that the client retries with the claims parameter and successfully obtains a valid token.

2. TestAppServiceWithClientCapabilities

   • Tests the inclusion of client capabilities in the request.
   • Verifies that the client_capabilities parameter is correctly passed and processed.

[chlowell]

I approve of the Go content. Someone from the MSAL side should review the doc content

[gladjohn]

this looks good and matches the app service new version. We just want to make sure not to merge this PR yet, as App Service rollout is still happening.

[4gust]

How does it work in MSAL .net about guarding the release or the version blocking ?

[gladjohn]

@4gust this looks good, did not approve it because of the app service api-version update. anyway we can guard it?

[sonarqubecloud]

Quality Gate passed

Issues
5 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud