Upcoming deprecations in Power Apps portals

This is an exciting time for Power Apps portals customers with lots of new capabilities being released and especially the announcement of Power Pages. 
However, this is also the time, when we look at our current platform capabilities and find optimizations which helps us keep moving in the direction of security, simplicity and modernization. In order to achieve that, we will be deprecating few existing functionalities in lieu of their modern equivalent. From June 2022, features listed below will be considered deprecated.
One important thing to note here is that deprecation doesn’t mean that features would be immediately removed and will stop working, these features will continue working and would be removed at a future date which is specified in Important upcoming changes and deprecations in Power Apps portals. However, we do encourage customers to migrate to the modern equivalent of these features as soon as possible to leverage Power Apps portals platform in the best way possible.

Following are the features which will be deprecated starting June 2022 –

1. Changes to OAuth 2.0 implicit grant flow 2.0 -> This feature allows developers to integrate external API with your Portal by securing these API calls through a OAuth token for the logged in user. More details about how this feature works can be found here. As part of the upcoming changes, we are making few changes to this functionality to make it more secure and simple to use
   • Deprecation of GET method to connect to token endpoint -> After this change, developers would be required to use POST method to get the auth token from token endpoint. This change makes this functionality more secure as POST method is better secured against CORS and CSRF functionality.
   • Deprecation of authorize endpoint -> After this change, authorize endpoint would be removed and only token endpoint would be supported.
   • Default certificate for signing the auth token  -> Currently as part of this functionality, all the auth tokens are signed using default certificate provided by Microsoft. As part of this change, developers would be required to use their own certificate which will then be used to sign the auth token. This will allow developers to align to the certificate lifetime and rotation policies of their organization.
   • More details about these changes along with their removal date can be found here. 
2. Entity List OData Feed Option -> When Odata feed enabled on website you can interact with table data via Restful webservice. However, the existing Odata feeds are based on odata 3.0 which is obsolete and offers limited functionality. With the launch of Power Apps portal Web API to interact with table data, we will be retiring entity list odata feed option. More details about these changes along with their removal date can be found here. 
3. Portals Runtime content editor ->  Users with suitable permissions can add, modify, or delete webpages and their content using portal runtime content editor.  This functionality has existed since very first version of Portals. However, with the launch of Power Apps portals design studio and most recently Power Pages Design studio, we have moved towards a better cohesive design experience for creating Portal content. More details about these changes along with their removal date can be found here. 
4. Yahoo auth provider support -> Power apps portals supports variety of commercial auth providers like Microsoft accounts, Google, Facebook, Linkedin etc. However, based on the provider usage and some significant changes to Yahoo auth provider, we will be discontinuing the support for Yahoo auth provider from Power Apps portals. Customers will still be able to use other auth providers as it is.
5. Lucene.net based Search -> Power Apps Portals provides a global search functionality based on a custom implementation of lucene.net which allows users to search within OOB and custom dataverse tables. However, this search comes with limited functionality and intelligence capabilities which modern websites demand. To support this, we had launched Dataverse search support for Power Apps portals sometime back which is generally available now. Dataverse search provides all the capabilities of current global search and augments it with new intelligent search capabilities as well. Hence, we are deprecating our current search capabilities and would be completely standardizing Portals global search on Dataverse search. More details about these changes along with their removal date can be found here.