-
Notifications
You must be signed in to change notification settings - Fork 3.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
{App Service} Call get_token()
with scopes
#30797
Conversation
️✔️AzureCLI-FullTest
|
️✔️AzureCLI-BreakingChangeTest
|
Thank you for your contribution! We will review the pull request and get back to you soon. |
The git hooks are available for azure-cli and azure-cli-extensions repos. They could help you run required checks before creating the PR. Please sync the latest code with latest dev branch (for azure-cli) or main branch (for azure-cli-extensions). pip install azdev --upgrade
azdev setup -c <your azure-cli repo path> -r <your azure-cli-extensions repo path>
|
Confirming that appservice intentionally also supports tokens with the ARM audience for historical reasons. We also support the "https://appservice.azure.com" audience for Azure cloud, which may be preferable for Azure CLI. Otherwise, this PR looks good. |
If you feel this is necessary, please submit a new PR for this change. You also need to register
|
Related command
az webapp deploy
Description
Calling
get_token()
withoutscopes
is no longer supported (#29690). After Track 1 SDK authentication removal (#29631), these tests failshttps://dev.azure.com/azclitools/public/_build/results?buildId=219257&view=logs&j=3791f883-8843-5e94-fc79-c8ca993c0a42&t=fc099b28-42bc-5603-6ee8-d61b88ef47c8
The access token is used to call
scm_url
(such ashttps://webapp-win-log000002.scm.azurewebsites.net
), but the token's audience is ARM (https://management.core.windows.net/
). This seems incorrect.