-
Notifications
You must be signed in to change notification settings - Fork 1.5k
[Auth] Regenerate vendored SDKs to comply with the correct credential_scopes handling logic #2634
Copy link
Copy link
Open
Labels
Accountfeature-requestThis issue requires a new behavior in the product in order be resolved.This issue requires a new behavior in the product in order be resolved.
Milestone
Description
Derived from Azure/azure-cli#15806
Some old Track 2 SDKs may have 2 issues when calling get_token:
- Empty scopes
- Multiple scopes
Both are incorrect logic. The correct credential_scopes handling logic is that Track 2 SDK should maintain one and only one scope as credential_scopes.
Please take the correct azure-mgmt-resource resource SDK as an example and make sure all vendored SDK comply with this logic:
self.credential_scopes = kwargs.pop('credential_scopes', ['https://management.azure.com/.default'])⚠ Although for now the erroneous SDKs work because CLI has added some workarounds to handle these issues, after migrating to Azure Identity and MSAL, these workarounds will fail. The old erroneous SDKs MUST be regenerated to comply with the correct credential_scopes handling logic.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
Accountfeature-requestThis issue requires a new behavior in the product in order be resolved.This issue requires a new behavior in the product in order be resolved.