@vscode/vsce 2.25.1-3 → 2.25.1-5

package/dist/vsce.d.ts

@@ -162,6 +162,7 @@ export declare interface IPublishOptions {
      * Defaults to the stored one.
      */
     readonly pat?: string;
+    readonly azureCredential?: boolean;
     readonly allowProposedApi?: boolean;
     readonly noVerify?: boolean;
     readonly allowProposedApis?: string[];

package/out/main.js

@@ -143,6 +143,7 @@ module.exports = function (argv) {
         .command('publish [version]')
         .description('Publishes an extension')
         .option('-p, --pat <token>', 'Personal Access Token (defaults to VSCE_PAT environment variable)', process.env['VSCE_PAT'])
+        .option('--azure-credential', 'Use Microsoft Entra ID for authentication')
         .option('-t, --target <targets...>', `Target architectures. Valid targets: ${ValidTargets}`)
         .option('--ignore-other-target-folders', `Ignore other target folders. Valid only when --target <target> is provided.`)
         .option('--readme-path <path>', 'Path to README file (defaults to README.md)')
@@ -170,8 +171,9 @@ module.exports = function (argv) {
         .option('--allow-missing-repository', 'Allow missing a repository URL in package.json')
         .option('--skip-duplicate', 'Fail silently if version already exists on the marketplace')
         .option('--skip-license', 'Allow publishing without license file')
-        .action((version, { pat, target, ignoreOtherTargetFolders, readmePath, changelogPath, message, gitTagVersion, updatePackageJson, packagePath, sigzipPath, githubBranch, gitlabBranch, baseContentUrl, baseImagesUrl, yarn, noVerify, allowProposedApis, allowAllProposedApis, ignoreFile, dependencies, preRelease, allowStarActivation, allowMissingRepository, skipDuplicate, skipLicense, }) => main((0, publish_1.publish)({
+        .action((version, { pat, azureCredential, target, ignoreOtherTargetFolders, readmePath, changelogPath, message, gitTagVersion, updatePackageJson, packagePath, sigzipPath, githubBranch, gitlabBranch, baseContentUrl, baseImagesUrl, yarn, noVerify, allowProposedApis, allowAllProposedApis, ignoreFile, dependencies, preRelease, allowStarActivation, allowMissingRepository, skipDuplicate, skipLicense, }) => main((0, publish_1.publish)({
         pat,
+        azureCredential,
         version,
         targets: target,
         ignoreOtherTargetFolders,
@@ -202,8 +204,9 @@ module.exports = function (argv) {
         .command('unpublish [extensionid]')
         .description('Unpublishes an extension. Example extension id: ms-vscode.live-server.')
         .option('-p, --pat <token>', 'Personal Access Token')
+        .option('--azure-credential', 'Use Microsoft Entra ID for authentication')
         .option('-f, --force', 'Skip confirmation prompt when unpublishing an extension')
-        .action((id, { pat, force }) => main((0, publish_1.unpublish)({ id, pat, force })));
+        .action((id, { pat, azureCredential, force }) => main((0, publish_1.unpublish)({ id, pat, azureCredential, force })));
     commander_1.default
         .command('ls-publishers')
         .description('Lists all known publishers')
@@ -222,9 +225,10 @@ module.exports = function (argv) {
         .action(name => main((0, store_1.logoutPublisher)(name)));
     commander_1.default
         .command('verify-pat [publisher]')
-        .description('Verifies if the Personal Access Token has publish rights for the publisher')
+        .description('Verifies if the Personal Access Token or Azure identity has publish rights for the publisher')
         .option('-p, --pat <token>', 'Personal Access Token (defaults to VSCE_PAT environment variable)', process.env['VSCE_PAT'])
-        .action((publisherName, { pat }) => main((0, store_1.verifyPat)({ publisherName, pat })));
+        .option('--azure-credential', 'Use Microsoft Entra ID for authentication')
+        .action((publisherName, { pat, azureCredential }) => main((0, store_1.verifyPat)({ publisherName, pat, azureCredential })));
     commander_1.default
         .command('show <extensionid>')
         .description(`Shows an extension's metadata`)

package/out/publish.js

@@ -26,7 +26,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.unpublish = exports.publish = void 0;
+exports.getPAT = exports.unpublish = exports.publish = void 0;
 const fs = __importStar(require("fs"));
 const util_1 = require("util");
 const semver = __importStar(require("semver"));
@@ -99,7 +99,7 @@ async function publish(options = {}) {
 }
 exports.publish = publish;
 async function _publish(packagePath, sigzipPath, manifest, options) {
-    const pat = options.pat ?? (await (0, store_1.getPublisher)(manifest.publisher)).pat;
+    const pat = await getPAT(manifest.publisher, options);
     const api = await (0, util_2.getGalleryAPI)(pat);
     const packageStream = fs.createReadStream(packagePath);
     const name = `${manifest.publisher}.${manifest.name}`;
@@ -211,7 +211,7 @@ async function unpublish(options = {}) {
             throw new Error('Aborted');
         }
     }
-    const pat = options.pat ?? (await (0, store_1.getPublisher)(publisher)).pat;
+    const pat = await getPAT(publisher, options);
     const api = await (0, util_2.getGalleryAPI)(pat);
     await api.deleteExtension(publisher, name);
     util_2.log.done(`Deleted extension: ${fullName}!`);
@@ -229,4 +229,14 @@ function validateMarketplaceRequirements(manifest, options) {
         throw new Error(`The VS Marketplace doesn't support prerelease versions: '${manifest.version}'. Checkout our pre-release versioning recommendation here: https://code.visualstudio.com/api/working-with-extensions/publishing-extension#prerelease-extensions`);
     }
 }
+async function getPAT(publisher, options) {
+    if (options.pat) {
+        return options.pat;
+    }
+    if (options.azureCredential) {
+        return await (0, util_2.getAzureCredentialAccessToken)();
+    }
+    return (await (0, store_1.getPublisher)(publisher)).pat;
+}
+exports.getPAT = getPAT;
 //# sourceMappingURL=publish.js.map

package/out/store.js

@@ -30,6 +30,7 @@ const os_1 = require("os");
 const util_1 = require("./util");
 const validation_1 = require("./validation");
 const package_1 = require("./package");
+const publish_1 = require("./publish");
 class FileStore {
     constructor(path, publishers) {
         this.path = path;
@@ -113,7 +114,7 @@ class KeytarStore {
 exports.KeytarStore = KeytarStore;
 async function verifyPat(options) {
     const publisherName = options.publisherName ?? (await (0, package_1.readManifest)()).publisher;
-    const pat = options.pat ?? (await getPublisher(publisherName)).pat;
+    const pat = await (0, publish_1.getPAT)(publisherName, options);
     try {
         // If the caller of the `getRoleAssignments` API has any of the roles
         // (Creator, Owner, Contributor, Reader) on the publisher, we get a 200,

package/out/util.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.patchOptionsWithManifest = exports.log = exports.sequence = exports.CancellationToken = exports.isCancelledError = exports.nonnull = exports.flatten = exports.chain = exports.normalize = exports.getPublicGalleryAPI = exports.getSecurityRolesAPI = exports.getGalleryAPI = exports.getHubUrl = exports.getMarketplaceUrl = exports.getPublishedUrl = exports.read = void 0;
+exports.patchOptionsWithManifest = exports.log = exports.sequence = exports.CancellationToken = exports.isCancelledError = exports.nonnull = exports.flatten = exports.chain = exports.normalize = exports.getAzureCredentialAccessToken = exports.getPublicGalleryAPI = exports.getSecurityRolesAPI = exports.getGalleryAPI = exports.getHubUrl = exports.getMarketplaceUrl = exports.getPublishedUrl = exports.read = void 0;
 const util_1 = require("util");
 const read_1 = __importDefault(require("read"));
 const WebApi_1 = require("azure-devops-node-api/WebApi");
@@ -11,6 +11,7 @@ const GalleryApi_1 = require("azure-devops-node-api/GalleryApi");
 const chalk_1 = __importDefault(require("chalk"));
 const publicgalleryapi_1 = require("./publicgalleryapi");
 const os_1 = require("os");
+const identity_1 = require("@azure/identity");
 const __read = (0, util_1.promisify)(read_1.default);
 function read(prompt, options = {}) {
     if (process.env['VSCE_TESTS'] || !process.stdout.isTTY) {
@@ -50,6 +51,17 @@ function getPublicGalleryAPI() {
     return new publicgalleryapi_1.PublicGalleryAPI(marketplaceUrl, '3.0-preview.1');
 }
 exports.getPublicGalleryAPI = getPublicGalleryAPI;
+async function getAzureCredentialAccessToken() {
+    try {
+        const credential = new identity_1.DefaultAzureCredential();
+        const token = await credential.getToken('499b84ac-1321-427f-aa17-267ca6975798/.default');
+        return token.token;
+    }
+    catch (error) {
+        throw new Error('Can not acquire a Microsoft Entra ID access token. Additional information:\n\n' + error);
+    }
+}
+exports.getAzureCredentialAccessToken = getAzureCredentialAccessToken;
 function normalize(path) {
     return path.replace(/\\/g, '/');
 }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@vscode/vsce",
-	"version": "2.25.1-3",
+	"version": "2.25.1-5",
 	"description": "VS Code Extensions Manager",
 	"repository": {
 		"type": "git",
@@ -38,6 +38,7 @@
 		"node": ">= 16"
 	},
 	"dependencies": {
+		"@azure/identity": "^4.1.0",
 		"azure-devops-node-api": "^12.5.0",
 		"chalk": "^2.4.2",
 		"cheerio": "^1.0.0-rc.9",