feat: Add Azure CLI auth source - #265

Merged

shirasassoon merged 95 commits into

microsoft:mainfrom

shirasassoon:feature/azure-cli-auth-poc

Aug 27, 2026

Commits on Jul 15, 2026

feat: Add Azure CLI auth source (POC)

Shira Sassoon
and
Copilot
committed
24582d3

Commits on Aug 11, 2026

Merge branch 'main' into feature/azure-cli-auth-poc
shirasassoon
authored
98e325b
feat: production-ready Azure CLI auth hardening

Shira Sassoon
and
Copilot
committed
c0ac959
perf: validate only Fabric scope at Azure CLI login

Shira Sassoon
and
Copilot
committed
8d48a1a
fix: restore 3-scope validation for Azure CLI login consistency

Shira Sassoon
and
Copilot
committed
aef875a
fix: add tenant display to interactive Azure CLI login path

Shira Sassoon
and
Copilot
committed
a2c5de6
update
Shira Sassoon
committed
7c499a2
perf: cache az account show result for 30s to avoid repeated subprocess calls

Shira Sassoon
and
Copilot
committed
a0215d2
fix: address tenant cache review feedback

Shira Sassoon
and
Copilot
committed
250e8fb
Merge branch 'main' into feature/azure-cli-auth-poc
shirasassoon
authored
3aed687
refactor: address code review feedback on Azure CLI auth

Shira Sassoon
and
Copilot
committed
28bf323

Commits on Aug 12, 2026

refactor: move Azure CLI error messages to ErrorMessages.Auth

Shira Sassoon
and
Copilot
committed
277dd0d
fix wording
Shira Sassoon
committed
8ed9892
Merge branch 'feature/azure-cli-auth-poc' of https://github.com/shirasassoon/fabric-cli into feature/azure-cli-auth-poc
Shira Sassoon
committed
39b7de1
refactor: replace denylist sanitization with SDK exception allowlist

Shira Sassoon
and
Copilot
committed
cb334eb
refactor: move azure-identity import to module level

Shira Sassoon
and
Copilot
committed
da260d3
fix comment
Shira Sassoon
committed
7705598
chore: remove unused fresh_auth fixture

Shira Sassoon
and
Copilot
committed
5be8a2a
fix: add azure_cli to test args fixture to prevent MagicMock truthy leak

Shira Sassoon
and
Copilot
committed
22ee7d9
add changelog
Shira Sassoon
committed
40213f0
Merge branch 'feature/azure-cli-auth-poc' of https://github.com/shirasassoon/fabric-cli into feature/azure-cli-auth-poc
Shira Sassoon
committed
b731895
test: expand Azure CLI auth test coverage

Shira Sassoon
and
Copilot
committed
3e09380
test: address review feedback on test quality

Shira Sassoon
and
Copilot
committed
3c7fd91
test: add parser and MSAL bridge coverage for Azure CLI auth

Shira Sassoon
and
Copilot
committed
e91c94b
test: address review feedback on test quality (round 2)

Shira Sassoon
and
Copilot
committed
76917c6
test: address review feedback round 3

Shira Sassoon
and
Copilot
committed
af7b21a
test: use monkeypatch.setattr for singleton file paths

Shira Sassoon
and
Copilot
committed
cbeba01
refactor: extract token refresh buffer to named constant

Shira Sassoon
and
Copilot
committed
f560488
fix: clear token cache on set_azure_cli to prevent stale cross-tenant tokens

Shira Sassoon
and
Copilot
committed
02f7618
fix: resolve az executable path for Windows compatibility

Shira Sassoon
and
Copilot
committed
8a3ae91
format fix
Shira Sassoon
committed
a4d4ec4
docs: add Azure CLI authentication to command reference and examples

Shira Sassoon
and
Copilot
committed
7ec4ee1
docs: add Azure CLI authentication to command reference and examples

Shira Sassoon
and
Copilot
committed
2a6ffe1
v
Shira Sassoon
committed
6624a1a
update docs
Shira Sassoon
committed
8fae5dc
update wording
Shira Sassoon
committed
4851ffa

Commits on Aug 13, 2026

fix: expand SDK exception allowlist with ServiceRequestError and ServiceResponseError

Shira Sassoon
and
Copilot
committed
ed0b2ed
test: verify non-azure-cli identity types do not invoke AzureCliCredential

Shira Sassoon
and
Copilot
committed
edfe385
refactor: move auth isolation tests from bridge to core auth test file

Shira Sassoon
and
Copilot
committed
d0c48c2
test: add bidirectional auth method isolation — azure_cli must not invoke MSAL

Shira Sassoon
and
Copilot
committed
f4379ad
chore: align azure-identity minimum to >=1.25.0 (consistent with fabric-cicd)

Shira Sassoon
and
Copilot
committed
8565bda

Commits on Aug 17, 2026

Merge branch 'main' into feature/azure-cli-auth-poc
shirasassoon
authored
56878e7
feat: add principal drift detection to prevent silent identity swaps

Shira Sassoon
and
Copilot
committed
72a5916

Commits on Aug 19, 2026

Merge branch 'main' into feature/azure-cli-auth-poc
shirasassoon
authored
a31a76e
refactor: remove in-memory token cache and globalize AzureCliCredential

Shira Sassoon
and
Copilot
committed
502224c
Merge branch 'feature/azure-cli-auth-poc' of https://github.com/shirasassoon/fabric-cli into feature/azure-cli-auth-poc
Shira Sassoon
committed
7e11472
refactor: single-channel Azure CLI via JWT-based drift detection

Shira Sassoon
and
Copilot
committed
1785775
feat: add issuer (iss) to drift detection key for sovereign cloud safety

Shira Sassoon
and
Copilot
committed
8b82831

Commits on Aug 20, 2026

security: fail-closed on missing JWT identity claims

Shira Sassoon
and
Copilot
committed
2d38b97
refactor: strict Azure CLI context inheritance, no tenant override

Shira Sassoon
and
Copilot
committed
f819ded
feat: validate --tenant flag against Azure CLI context

Shira Sassoon
and
Copilot
committed
165aa7d
fix: environment drift check compares issuer host only, not full URL

Shira Sassoon
and
Copilot
committed
0dcba92
fix: suppress noisy Azure SDK logging in fab auth status

Shira Sassoon
and
Copilot
committed
acb923b
fix: correct mock assertions for keyword arg in set_azure_cli tests

Shira Sassoon
and
Copilot
committed
3ff1e13
fix error messages
Shira Sassoon
committed
769b0cf
Merge branch 'feature/azure-cli-auth-poc' of https://github.com/shirasassoon/fabric-cli into feature/azure-cli-auth-poc
Shira Sassoon
committed
3e32629
fux
Shira Sassoon
committed
bda02b2
fix
Shira Sassoon
committed
72aa017
fix: update test assertions to match simplified error messages

Shira Sassoon
and
Copilot
committed
8d7f062

Commits on Aug 23, 2026

refactor: use signature-validated _decode_jwt_token for Azure CLI auth

Shira Sassoon
and
Copilot
committed
316cb63
fix: add JWKS bypass monkeypatch to MSAL bridge Azure CLI tests

Shira Sassoon
and
Copilot
committed
0140a7e
security: suppress azure.identity/azure.core loggers globally

Shira Sassoon
and
Copilot
committed
0da5b2f
docs: clarify --tenant flag behavior for Azure CLI auth

Shira Sassoon
and
Copilot
committed
11a19a2
fix: roll back partial auth state when Azure CLI probe fails on mode switch

Shira Sassoon
and
Copilot
committed
abf66a8
security: use isinstance for SDK exception allowlist instead of name-based check

Shira Sassoon
and
Copilot
committed
b6b793c
fix: always logout on failed probe for consistency with MSAL flow

Shira Sassoon
and
Copilot
committed
b322242
security: apply full SDK exception allowlist to probe path

Shira Sassoon
and
Copilot
committed
0448b28
fix: distinguish drift errors from session expiry in auth status

Shira Sassoon
and
Copilot
committed
7a80a21

Commits on Aug 24, 2026

feedback
Shira Sassoon
committed
d818994
update
Shira Sassoon
committed
cb47d13
remove auth_source field for consistency
Shira Sassoon
committed
d4ba520
remove redundancy
Shira Sassoon
committed
7ad145e
feat(auth): remove drift detection and simplify Azure CLI auth flow

Shira Sassoon
and
Copilot
committed
b2b0f5d
fix(auth): remove Azure CLI success message for MSAL consistency

Shira Sassoon
and
Copilot
committed
1549b24
update docs
Shira Sassoon
committed
8827af1
fix
Shira Sassoon
committed
1c0faeb
revert
Shira Sassoon
committed
76a7da7

Commits on Aug 25, 2026

fix(auth): always update tenant from Azure CLI token on each acquisition

Shira Sassoon
and
Copilot
committed
e0bffc7
fix(auth): bypass set_tenant for Azure CLI to prevent partial logout

Shira Sassoon
and
Copilot
committed
f9405e4
clean up
Shira Sassoon
committed
a4c3339
add azure sdk logging suppression
Shira Sassoon
committed
fb7bcd1
fix bug with tenant and status ui
Shira Sassoon
committed
794d830
Merge branch 'main' into feature/azure-cli-auth-poc
shirasassoon
authored
294e050
add timeout, fix failing tests, clean up import, remove decode jwt logic from tests
Shira Sassoon
committed
0369efd
Merge branch 'feature/azure-cli-auth-poc' of https://github.com/shirasassoon/fabric-cli into feature/azure-cli-auth-poc
Shira Sassoon
committed
5efe6d4
add space back
Shira Sassoon
committed
73fec4a
add arg validation
Shira Sassoon
committed
5f0ed58

Commits on Aug 26, 2026

fix doc for clarity, validate args just for azure cli, test feedback
Shira Sassoon
committed
69809ed
revert out of scope change
Shira Sassoon
committed
1142c7e
feedback
Shira Sassoon
committed
462d1e0
fix cleanup
Shira Sassoon
committed
7c4a269
revert
shirasassoon
authored
b37f5b6
fix revert
shirasassoon
authored
7c6f0a0
Enhance auth command to support interactive moderevert
shirasassoon
authored
d410b4e
fix format
Shira Sassoon
committed
fbc665a