MSAL.NET

The TokenCache API in MSAL.NET uses void-returning event handlers for load/persist operations, forcing synchronous calls to distributed caches. This blocks threads and can cause application crashes under high load in ASP.NET Core applications, as async cache APIs cannot be leveraged.

MSAL focuses primarily on authentication and token issuance but does not fully address access control issues or implement role-based and feature-level access control within applications. Developers must build custom authorization logic.