@azure/identity 4.3.0-alpha.20240426.2 → 4.3.0-alpha.20240502.1

package/dist/index.js

@@ -44,7 +44,7 @@ var child_process__namespace = /*#__PURE__*/_interopNamespaceDefault(child_proce
 /**
  * Current version of the `@azure/identity` package.
  */
-const SDK_VERSION = `4.2.0`;
+const SDK_VERSION = `4.3.0-beta.1`;
 /**
  * The default client ID for authentication
  * @internal
@@ -4337,10 +4337,10 @@ class DeviceCodeCredential {
 // Copyright (c) Microsoft Corporation.
 // Licensed under the MIT license.
 const credentialName$1 = "AzurePipelinesServiceConnectionCredential";
-const OIDC_API_VERSION = "7.1";
 const logger$2 = credentialLogger(credentialName$1);
+const OIDC_API_VERSION = "7.1-preview.1";
 /**
- * This credential is designed to be used in ADO Pipelines with service connections
+ * This credential is designed to be used in Azure Pipelines with service connections
  * as a setup for workload identity federation.
  */
 class AzurePipelinesServiceConnectionCredential {
@@ -4348,7 +4348,7 @@ class AzurePipelinesServiceConnectionCredential {
      * AzurePipelinesServiceConnectionCredential supports Federated Identity on Azure Pipelines through Service Connections.
      * @param tenantId - tenantId associated with the service connection
      * @param clientId - clientId associated with the service connection
-     * @param serviceConnectionId - id for the service connection
+     * @param serviceConnectionId - id for the service connection, as found in the querystring's resourceId key
      * @param options - The identity client options to use for authentication.
      */
     constructor(tenantId, clientId, serviceConnectionId, options) {
@@ -4359,7 +4359,7 @@ class AzurePipelinesServiceConnectionCredential {
         logger$2.info(`Invoking AzurePipelinesServiceConnectionCredential with tenant ID: ${tenantId}, clientId: ${clientId} and service connection id: ${serviceConnectionId}`);
         if (clientId && tenantId && serviceConnectionId) {
             this.ensurePipelinesSystemVars();
-            const oidcRequestUrl = `${process.env.SYSTEM_TEAMFOUNDATIONCOLLECTIONURI}${process.env.SYSTEM_TEAMPROJECTID}/_apis/distributedtask/hubs/build/plans/${process.env.SYSTEM_PLANID}/jobs/${process.env.SYSTEM_JOBID}/oidctoken?api-version=${OIDC_API_VERSION}&serviceConnectionId=${this.serviceConnectionId}`;
+            const oidcRequestUrl = `${process.env.SYSTEM_TEAMFOUNDATIONCOLLECTIONURI}${process.env.SYSTEM_TEAMPROJECTID}/_apis/distributedtask/hubs/build/plans/${process.env.SYSTEM_PLANID}/jobs/${process.env.SYSTEM_JOBID}/oidctoken?api-version=${OIDC_API_VERSION}&serviceConnectionId=${serviceConnectionId}`;
             const systemAccessToken = `${process.env.SYSTEM_ACCESSTOKEN}`;
             logger$2.info(`Invoking ClientAssertionCredential with tenant ID: ${tenantId}, clientId: ${clientId} and service connection id: ${serviceConnectionId}`);
             this.clientAssertionCredential = new ClientAssertionCredential(tenantId, clientId, this.requestOidcToken.bind(this, oidcRequestUrl, systemAccessToken), options);
@@ -4375,8 +4375,7 @@ class AzurePipelinesServiceConnectionCredential {
      */
     async getToken(scopes, options) {
         if (!this.clientAssertionCredential) {
-            const errorMessage = `${credentialName$1}: is unavailable. tenantId, clientId, and serviceConnectionId are required parameters. 
-      To use Federation Identity in Azure Pipelines, these are required as inputs / env variables - 
+            const errorMessage = `${credentialName$1}: is unavailable. To use Federation Identity in Azure Pipelines, these are required as input parameters / env variables - 
       tenantId,
       clientId,
       serviceConnectionId,
@@ -4413,14 +4412,16 @@ class AzurePipelinesServiceConnectionCredential {
         const response = await httpClient.sendRequest(request);
         const text = response.bodyAsText;
         if (!text) {
-            throw new AuthenticationError(response.status, `${credentialName$1}: Authenticated Failed. Received null token from OIDC request.`);
+            logger$2.error(`${credentialName$1}: Authenticated Failed. Received null token from OIDC request. Response status- ${response.status}. Complete response - ${JSON.stringify(response)}`);
+            throw new CredentialUnavailableError(`${credentialName$1}: Authenticated Failed. Received null token from OIDC request. Response status- ${response.status}. Complete response - ${JSON.stringify(response)}`);
         }
         const result = JSON.parse(text);
         if (result === null || result === void 0 ? void 0 : result.oidcToken) {
             return result.oidcToken;
         }
         else {
-            throw new AuthenticationError(response.status, `${credentialName$1}: Authentication Failed. oidcToken field not detected in the response. Response = ${JSON.stringify(result)}`);
+            logger$2.error(`${credentialName$1}: Authentication Failed. oidcToken field not detected in the response. Response = ${JSON.stringify(result)}`);
+            throw new CredentialUnavailableError(`${credentialName$1}: Authentication Failed. oidcToken field not detected in the response. Response = ${JSON.stringify(result)}`);
         }
     }
     /**