feat: Add Azure CLI auth source - #265

Open

shirasassoon wants to merge 59 commits into

microsoft:mainfrom

shirasassoon:feature/azure-cli-auth-poc

Commits on Jul 15, 2026

feat: Add Azure CLI auth source (POC)

Shira Sassoon
and
Copilot
committed
24582d3

Commits on Aug 11, 2026

Merge branch 'main' into feature/azure-cli-auth-poc
shirasassoon
authored
98e325b
feat: production-ready Azure CLI auth hardening

Shira Sassoon
and
Copilot
committed
c0ac959
perf: validate only Fabric scope at Azure CLI login

Shira Sassoon
and
Copilot
committed
8d48a1a
fix: restore 3-scope validation for Azure CLI login consistency

Shira Sassoon
and
Copilot
committed
aef875a
fix: add tenant display to interactive Azure CLI login path

Shira Sassoon
and
Copilot
committed
a2c5de6
update
Shira Sassoon
committed
7c499a2
perf: cache az account show result for 30s to avoid repeated subprocess calls

Shira Sassoon
and
Copilot
committed
a0215d2
fix: address tenant cache review feedback

Shira Sassoon
and
Copilot
committed
250e8fb
Merge branch 'main' into feature/azure-cli-auth-poc
shirasassoon
authored
3aed687
refactor: address code review feedback on Azure CLI auth

Shira Sassoon
and
Copilot
committed
28bf323

Commits on Aug 12, 2026

refactor: move Azure CLI error messages to ErrorMessages.Auth

Shira Sassoon
and
Copilot
committed
277dd0d
fix wording
Shira Sassoon
committed
8ed9892
Merge branch 'feature/azure-cli-auth-poc' of https://github.com/shirasassoon/fabric-cli into feature/azure-cli-auth-poc
Shira Sassoon
committed
39b7de1
refactor: replace denylist sanitization with SDK exception allowlist

Shira Sassoon
and
Copilot
committed
cb334eb
refactor: move azure-identity import to module level

Shira Sassoon
and
Copilot
committed
da260d3
fix comment
Shira Sassoon
committed
7705598
chore: remove unused fresh_auth fixture

Shira Sassoon
and
Copilot
committed
5be8a2a
fix: add azure_cli to test args fixture to prevent MagicMock truthy leak

Shira Sassoon
and
Copilot
committed
22ee7d9
add changelog
Shira Sassoon
committed
40213f0
Merge branch 'feature/azure-cli-auth-poc' of https://github.com/shirasassoon/fabric-cli into feature/azure-cli-auth-poc
Shira Sassoon
committed
b731895
test: expand Azure CLI auth test coverage

Shira Sassoon
and
Copilot
committed
3e09380
test: address review feedback on test quality

Shira Sassoon
and
Copilot
committed
3c7fd91
test: add parser and MSAL bridge coverage for Azure CLI auth

Shira Sassoon
and
Copilot
committed
e91c94b
test: address review feedback on test quality (round 2)

Shira Sassoon
and
Copilot
committed
76917c6
test: address review feedback round 3

Shira Sassoon
and
Copilot
committed
af7b21a
test: use monkeypatch.setattr for singleton file paths

Shira Sassoon
and
Copilot
committed
cbeba01
refactor: extract token refresh buffer to named constant

Shira Sassoon
and
Copilot
committed
f560488
fix: clear token cache on set_azure_cli to prevent stale cross-tenant tokens

Shira Sassoon
and
Copilot
committed
02f7618
fix: resolve az executable path for Windows compatibility

Shira Sassoon
and
Copilot
committed
8a3ae91
format fix
Shira Sassoon
committed
a4d4ec4
docs: add Azure CLI authentication to command reference and examples

Shira Sassoon
and
Copilot
committed
7ec4ee1
docs: add Azure CLI authentication to command reference and examples

Shira Sassoon
and
Copilot
committed
2a6ffe1
v
Shira Sassoon
committed
6624a1a
update docs
Shira Sassoon
committed
8fae5dc
update wording
Shira Sassoon
committed
4851ffa

Commits on Aug 13, 2026

fix: expand SDK exception allowlist with ServiceRequestError and ServiceResponseError

Shira Sassoon
and
Copilot
committed
ed0b2ed
test: verify non-azure-cli identity types do not invoke AzureCliCredential

Shira Sassoon
and
Copilot
committed
edfe385
refactor: move auth isolation tests from bridge to core auth test file

Shira Sassoon
and
Copilot
committed
d0c48c2
test: add bidirectional auth method isolation — azure_cli must not invoke MSAL

Shira Sassoon
and
Copilot
committed
f4379ad
chore: align azure-identity minimum to >=1.25.0 (consistent with fabric-cicd)

Shira Sassoon
and
Copilot
committed
8565bda

Commits on Aug 17, 2026

Merge branch 'main' into feature/azure-cli-auth-poc
shirasassoon
authored
56878e7
feat: add principal drift detection to prevent silent identity swaps

Shira Sassoon
and
Copilot
committed
72a5916

Commits on Aug 19, 2026

Merge branch 'main' into feature/azure-cli-auth-poc
shirasassoon
authored
a31a76e
refactor: remove in-memory token cache and globalize AzureCliCredential

Shira Sassoon
and
Copilot
committed
502224c
Merge branch 'feature/azure-cli-auth-poc' of https://github.com/shirasassoon/fabric-cli into feature/azure-cli-auth-poc
Shira Sassoon
committed
7e11472
refactor: single-channel Azure CLI via JWT-based drift detection

Shira Sassoon
and
Copilot
committed
1785775
feat: add issuer (iss) to drift detection key for sovereign cloud safety

Shira Sassoon
and
Copilot
committed
8b82831

Commits on Aug 20, 2026

security: fail-closed on missing JWT identity claims

Shira Sassoon
and
Copilot
committed
2d38b97
refactor: strict Azure CLI context inheritance, no tenant override

Shira Sassoon
and
Copilot
committed
f819ded
feat: validate --tenant flag against Azure CLI context

Shira Sassoon
and
Copilot
committed
165aa7d
fix: environment drift check compares issuer host only, not full URL

Shira Sassoon
and
Copilot
committed
0dcba92
fix: suppress noisy Azure SDK logging in fab auth status

Shira Sassoon
and
Copilot
committed
acb923b
fix: correct mock assertions for keyword arg in set_azure_cli tests

Shira Sassoon
and
Copilot
committed
3ff1e13
fix error messages
Shira Sassoon
committed
769b0cf
Merge branch 'feature/azure-cli-auth-poc' of https://github.com/shirasassoon/fabric-cli into feature/azure-cli-auth-poc
Shira Sassoon
committed
3e32629
fux
Shira Sassoon
committed
bda02b2
fix
Shira Sassoon
committed
72aa017
fix: update test assertions to match simplified error messages

Shira Sassoon
and
Copilot
committed
8d7f062