{App Service} Call get_token() with scopes#30797
Conversation
️✔️AzureCLI-FullTest
|
️✔️AzureCLI-BreakingChangeTest
|
|
Thank you for your contribution! We will review the pull request and get back to you soon. |
|
The git hooks are available for azure-cli and azure-cli-extensions repos. They could help you run required checks before creating the PR. Please sync the latest code with latest dev branch (for azure-cli) or main branch (for azure-cli-extensions). pip install azdev --upgrade
azdev setup -c <your azure-cli repo path> -r <your azure-cli-extensions repo path>
|
|
Confirming that appservice intentionally also supports tokens with the ARM audience for historical reasons. We also support the "https://appservice.azure.com" audience for Azure cloud, which may be preferable for Azure CLI. Otherwise, this PR looks good. |
If you feel this is necessary, please submit a new PR for this change. You also need to register |
Related command
az webapp deployDescription
Calling
get_token()withoutscopesis no longer supported (#29690). After Track 1 SDK authentication removal (#29631), these tests failshttps://dev.azure.com/azclitools/public/_build/results?buildId=219257&view=logs&j=3791f883-8843-5e94-fc79-c8ca993c0a42&t=fc099b28-42bc-5603-6ee8-d61b88ef47c8
The access token is used to call
scm_url(such ashttps://webapp-win-log000002.scm.azurewebsites.net), but the token's audience is ARM (https://management.core.windows.net/). This seems incorrect.