RBTools 5.3__tar.gz → 7.0__tar.gz

{rbtools-5.3 → rbtools-7.0}/AUTHORS

@@ -29,12 +29,12 @@ Contributors:
 	* Anthony Cruz
 	* Anthony Hache
 	* Azad Salahli
-	* Barret Rennie
 	* Bartosz Gołek
 	* Ben (full name unknown)
 	* Ben Asher
 	* Ben Hollis
 	* Ben Jackson
+	* Beth Rennie
 	* Bogdana Popa
 	* Bradley Baetz
 	* Brandon Martin
@@ -45,6 +45,7 @@ Contributors:
 	* Chris Eagan
 	* Chris Hunt
 	* Chris Liu
+	* Conor Burgess
 	* Craig Silverstein
 	* Damian
 	* Dana Lacoste

{rbtools-5.3 → rbtools-7.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: RBTools
-Version: 5.3
+Version: 7.0
 Summary: Command line tools and API for working with code and document reviews on Review Board
 Author-email: "Beanbag, Inc." <questions@beanbaginc.com>
 License: MIT
@@ -16,26 +16,26 @@ Classifier: Natural Language :: English
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.8
-Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Software Development
 Classifier: Topic :: Software Development :: Quality Assurance
-Requires-Python: >=3.8
+Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: COPYING
 License-File: AUTHORS
+Requires-Dist: appdirs~=1.4.4
 Requires-Dist: certifi>=2023.5.7
-Requires-Dist: colorama
 Requires-Dist: housekeeping~=1.1
 Requires-Dist: packaging>=21.3
 Requires-Dist: puremagic
 Requires-Dist: pydiffx~=1.1.0
-Requires-Dist: texttable
+Requires-Dist: rich~=15.0
+Requires-Dist: typelets~=1.1.0
 Requires-Dist: typing_extensions>=4.3.0
-Requires-Dist: tqdm
 Requires-Dist: importlib-metadata>=5.0
 Requires-Dist: importlib-resources>=5.9
 Dynamic: license-file

{rbtools-5.3 → rbtools-7.0}/RBTools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: RBTools
-Version: 5.3
+Version: 7.0
 Summary: Command line tools and API for working with code and document reviews on Review Board
 Author-email: "Beanbag, Inc." <questions@beanbaginc.com>
 License: MIT
@@ -16,26 +16,26 @@ Classifier: Natural Language :: English
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.8
-Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Software Development
 Classifier: Topic :: Software Development :: Quality Assurance
-Requires-Python: >=3.8
+Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: COPYING
 License-File: AUTHORS
+Requires-Dist: appdirs~=1.4.4
 Requires-Dist: certifi>=2023.5.7
-Requires-Dist: colorama
 Requires-Dist: housekeeping~=1.1
 Requires-Dist: packaging>=21.3
 Requires-Dist: puremagic
 Requires-Dist: pydiffx~=1.1.0
-Requires-Dist: texttable
+Requires-Dist: rich~=15.0
+Requires-Dist: typelets~=1.1.0
 Requires-Dist: typing_extensions>=4.3.0
-Requires-Dist: tqdm
 Requires-Dist: importlib-metadata>=5.0
 Requires-Dist: importlib-resources>=5.9
 Dynamic: license-file

{rbtools-5.3 → rbtools-7.0}/RBTools.egg-info/SOURCES.txt

@@ -39,6 +39,7 @@ contrib/tools/git-hook-check-approval
 contrib/tools/git-hook-set-submitted
 contrib/tools/p4-trigger-script
 docs/rbtools/Makefile
+docs/rbtools/authentication.rst
 docs/rbtools/conf.py
 docs/rbtools/glossary.rst
 docs/rbtools/index.rst
@@ -48,7 +49,6 @@ docs/rbtools/_ext/__init__.py
 docs/rbtools/_ext/rbt_commands.py
 docs/rbtools/api/index.rst
 docs/rbtools/api/overview.rst
-docs/rbtools/api/resource-specific.rst
 docs/rbtools/api/tutorial.rst
 docs/rbtools/api/coderef/index.rst
 docs/rbtools/rbt/index.rst
@@ -59,6 +59,7 @@ docs/rbtools/rbt/commands/clear-cache.rst
 docs/rbtools/rbt/commands/close.rst
 docs/rbtools/rbt/commands/diff.rst
 docs/rbtools/rbt/commands/index.rst
+docs/rbtools/rbt/commands/info.rst
 docs/rbtools/rbt/commands/install.rst
 docs/rbtools/rbt/commands/land.rst
 docs/rbtools/rbt/commands/list-repo-types.rst
@@ -73,7 +74,7 @@ docs/rbtools/rbt/commands/setup-repo.rst
 docs/rbtools/rbt/commands/stamp.rst
 docs/rbtools/rbt/commands/status-update.rst
 docs/rbtools/rbt/commands/status.rst
-docs/rbtools/rbt/configuration/authentication.rst
+docs/rbtools/rbt/configuration/aliases.rst
 docs/rbtools/rbt/configuration/index.rst
 docs/rbtools/rbt/configuration/repositories.rst
 docs/rbtools/rbt/configuration/tfs.rst
@@ -81,6 +82,7 @@ docs/rbtools/rbt/configuration/users.rst
 docs/rbtools/workflows/clearcase.rst
 docs/rbtools/workflows/git.rst
 docs/rbtools/workflows/index.rst
+docs/rbtools/workflows/jujutsu.rst
 docs/rbtools/workflows/perforce.rst
 docs/rbtools/workflows/sos.rst
 docs/releasenotes/0.2-beta-1.rst
@@ -138,6 +140,8 @@ docs/releasenotes/5.1.rst
 docs/releasenotes/5.2.1.rst
 docs/releasenotes/5.2.rst
 docs/releasenotes/5.3.rst
+docs/releasenotes/6.0.rst
+docs/releasenotes/7.0.rst
 docs/releasenotes/Makefile
 docs/releasenotes/conf.py
 docs/releasenotes/index.rst
@@ -153,10 +157,73 @@ rbtools/api/decorators.py
 rbtools/api/errors.py
 rbtools/api/factory.py
 rbtools/api/request.py
-rbtools/api/resource.py
 rbtools/api/utils.py
+rbtools/api/resource/__init__.py
+rbtools/api/resource/api_token.py
+rbtools/api/resource/archived_review_request.py
+rbtools/api/resource/base.py
+rbtools/api/resource/base_archived_object.py
+rbtools/api/resource/base_comment.py
+rbtools/api/resource/base_diff_commit.py
+rbtools/api/resource/base_review.py
+rbtools/api/resource/base_review_group.py
+rbtools/api/resource/base_review_request.py
+rbtools/api/resource/base_user.py
+rbtools/api/resource/change.py
+rbtools/api/resource/default_reviewer.py
+rbtools/api/resource/diff.py
+rbtools/api/resource/diff_comment.py
+rbtools/api/resource/diff_commit.py
+rbtools/api/resource/diff_context.py
+rbtools/api/resource/diff_file_attachment.py
+rbtools/api/resource/draft_diff_commit.py
+rbtools/api/resource/draft_file_attachment.py
+rbtools/api/resource/draft_screenshot.py
+rbtools/api/resource/extension.py
+rbtools/api/resource/file_attachment.py
+rbtools/api/resource/file_attachment_comment.py
+rbtools/api/resource/file_diff.py
+rbtools/api/resource/general_comment.py
+rbtools/api/resource/hosting_service.py
+rbtools/api/resource/hosting_service_account.py
+rbtools/api/resource/last_update.py
+rbtools/api/resource/mixins.py
+rbtools/api/resource/muted_review_request.py
+rbtools/api/resource/oauth_application.py
+rbtools/api/resource/oauth_token.py
+rbtools/api/resource/plain_text.py
+rbtools/api/resource/remote_repository.py
+rbtools/api/resource/repository.py
+rbtools/api/resource/repository_branch.py
+rbtools/api/resource/repository_commit.py
+rbtools/api/resource/repository_group.py
+rbtools/api/resource/repository_info.py
+rbtools/api/resource/repository_user.py
+rbtools/api/resource/review.py
+rbtools/api/resource/review_group.py
+rbtools/api/resource/review_group_user.py
+rbtools/api/resource/review_reply.py
+rbtools/api/resource/review_request.py
+rbtools/api/resource/review_request_draft.py
+rbtools/api/resource/root.py
+rbtools/api/resource/screenshot.py
+rbtools/api/resource/screenshot_comment.py
+rbtools/api/resource/search.py
+rbtools/api/resource/server_info.py
+rbtools/api/resource/session.py
+rbtools/api/resource/status_update.py
+rbtools/api/resource/user.py
+rbtools/api/resource/user_file_attachment.py
+rbtools/api/resource/validate_diff.py
+rbtools/api/resource/validate_diff_commit.py
+rbtools/api/resource/validation.py
+rbtools/api/resource/watched.py
+rbtools/api/resource/watched_review_group.py
+rbtools/api/resource/watched_review_request.py
+rbtools/api/resource/webhook.py
 rbtools/api/tests/__init__.py
 rbtools/api/tests/base.py
+rbtools/api/tests/test_auth_handlers.py
 rbtools/api/tests/test_capabilities.py
 rbtools/api/tests/test_errors.py
 rbtools/api/tests/test_factory.py
@@ -170,6 +237,7 @@ rbtools/clients/clearcase.py
 rbtools/clients/cvs.py
 rbtools/clients/errors.py
 rbtools/clients/git.py
+rbtools/clients/jujutsu.py
 rbtools/clients/mercurial.py
 rbtools/clients/perforce.py
 rbtools/clients/plastic.py
@@ -177,7 +245,6 @@ rbtools/clients/sos.py
 rbtools/clients/svn.py
 rbtools/clients/tfs.py
 rbtools/clients/base/__init__.py
-rbtools/clients/base/patch.py
 rbtools/clients/base/registry.py
 rbtools/clients/base/repository.py
 rbtools/clients/base/scmclient.py
@@ -187,7 +254,7 @@ rbtools/clients/tests/test_bzr.py
 rbtools/clients/tests/test_clearcase.py
 rbtools/clients/tests/test_cvs.py
 rbtools/clients/tests/test_git.py
-rbtools/clients/tests/test_legacy_patcher.py
+rbtools/clients/tests/test_jujutsu.py
 rbtools/clients/tests/test_mercurial.py
 rbtools/clients/tests/test_p4.py
 rbtools/clients/tests/test_plastic.py
@@ -264,6 +331,7 @@ rbtools/clients/tests/testdata/homedir/.bazaar/bazaar.conf
 rbtools/clients/tests/testdata/svn-repo/README.txt
 rbtools/clients/tests/testdata/svn-repo/format
 rbtools/clients/tests/testdata/svn-repo/conf/authz
+rbtools/clients/tests/testdata/svn-repo/conf/hooks-env.tmpl
 rbtools/clients/tests/testdata/svn-repo/conf/passwd
 rbtools/clients/tests/testdata/svn-repo/conf/svnserve.conf
 rbtools/clients/tests/testdata/svn-repo/db/current
@@ -283,6 +351,7 @@ rbtools/clients/tests/testdata/svn-repo/db/revprops/0/3
 rbtools/clients/tests/testdata/svn-repo/db/revprops/0/4
 rbtools/clients/tests/testdata/svn-repo/db/revprops/0/5
 rbtools/clients/tests/testdata/svn-repo/db/revprops/0/6
+rbtools/clients/tests/testdata/svn-repo/db/revprops/0/7
 rbtools/clients/tests/testdata/svn-repo/db/revs/0/0
 rbtools/clients/tests/testdata/svn-repo/db/revs/0/1
 rbtools/clients/tests/testdata/svn-repo/db/revs/0/2
@@ -290,6 +359,7 @@ rbtools/clients/tests/testdata/svn-repo/db/revs/0/3
 rbtools/clients/tests/testdata/svn-repo/db/revs/0/4
 rbtools/clients/tests/testdata/svn-repo/db/revs/0/5
 rbtools/clients/tests/testdata/svn-repo/db/revs/0/6
+rbtools/clients/tests/testdata/svn-repo/db/revs/0/7
 rbtools/clients/tests/testdata/svn-repo/db/transactions/.gitignore
 rbtools/clients/tests/testdata/svn-repo/db/txn-protorevs/.gitignore
 rbtools/clients/tests/testdata/svn-repo/hooks/post-commit.tmpl
@@ -336,9 +406,15 @@ rbtools/commands/conf/completions/zsh
 rbtools/commands/tests/__init__.py
 rbtools/commands/tests/test_alias.py
 rbtools/commands/tests/test_base_output.py
+rbtools/commands/tests/test_command_auth_session.py
 rbtools/commands/tests/test_command_initialization.py
+rbtools/commands/tests/test_info.py
+rbtools/commands/tests/test_login.py
+rbtools/commands/tests/test_logout.py
 rbtools/commands/tests/test_main.py
+rbtools/commands/tests/test_patch.py
 rbtools/commands/tests/test_post.py
+rbtools/commands/tests/test_review.py
 rbtools/commands/tests/test_setup_completion.py
 rbtools/commands/tests/test_setup_repo.py
 rbtools/config/__init__.py
@@ -384,14 +460,17 @@ rbtools/testing/api/__init__.py
 rbtools/testing/api/payloads.py
 rbtools/testing/api/transport.py
 rbtools/testing/scripts/editor.py
-rbtools/utils/COPYING.appdirs
-rbtools/utils/README.appdirs
+rbtools/ui/__init__.py
+rbtools/ui/console.py
+rbtools/ui/theme.py
+rbtools/ui/tests/__init__.py
+rbtools/ui/tests/test_console.py
 rbtools/utils/__init__.py
 rbtools/utils/aliases.py
-rbtools/utils/appdirs.py
 rbtools/utils/browser.py
 rbtools/utils/checks.py
 rbtools/utils/commands.py
+rbtools/utils/commit_messages.py
 rbtools/utils/console.py
 rbtools/utils/diffs.py
 rbtools/utils/encoding.py
@@ -410,6 +489,7 @@ rbtools/utils/tests/__init__.py
 rbtools/utils/tests/test_aliases.py
 rbtools/utils/tests/test_buffered_iterator.py
 rbtools/utils/tests/test_checks.py
+rbtools/utils/tests/test_commit_messages.py
 rbtools/utils/tests/test_console.py
 rbtools/utils/tests/test_encoding.py
 rbtools/utils/tests/test_filesystem.py

{rbtools-5.3 → rbtools-7.0}/RBTools.egg-info/requires.txt

@@ -1,11 +1,11 @@
+appdirs~=1.4.4
 certifi>=2023.5.7
-colorama
 housekeeping~=1.1
 packaging>=21.3
 puremagic
 pydiffx~=1.1.0
-texttable
+rich~=15.0
+typelets~=1.1.0
 typing_extensions>=4.3.0
-tqdm
 importlib-metadata>=5.0
 importlib-resources>=5.9

{rbtools-5.3 → rbtools-7.0}/contrib/installers/windows/build-installer.bat

@@ -30,15 +30,25 @@ set DEPS_DIR=%BUILD_BASE%\deps
 ::-------------------------------------------------------------------------
 :: Dependencies
 ::-------------------------------------------------------------------------
-set PYTHON_VERSION=3.10.11
+set PYTHON_VERSION=3.13.15
 
 set PYTHON_URL_BASE=https://www.python.org/ftp/python
 
 set PYTHON_X64_FILENAME=python-%PYTHON_VERSION%-amd64.exe
 set PYTHON_X64_URL=%PYTHON_URL_BASE%/%PYTHON_VERSION%/%PYTHON_X64_FILENAME%
-set PYTHON_X64_MD5=a55e9c1e6421c84a4bd8b4be41492f51
+set PYTHON_X64_SHA256=edec09c4853aeae9ac36efb8c9f95b6b8e2fee65eee56d9767a8b7c69c574403
 set PYTHON_X64_DEP=%DEPS_DIR%\python-%PYTHON_VERSION%-x64
 
+set NUGET_VERSION=6.9.1
+set NUGET_URL=https://dist.nuget.org/win-x86-commandline/v%NUGET_VERSION%/nuget.exe
+set NUGET_SHA256=82bb13e2365e1e5ee7d0975618dcf90b279427de8a7ecb338b9b78bfc457d51b
+set NUGET_DIR=%DEPS_DIR%\nuget-%NUGET_VERSION%
+set NUGET_EXE=%NUGET_DIR%\nuget.exe
+
+set TRUSTED_SIGNING_CLIENT_VERSION=1.0.60
+set TRUSTED_SIGNING_CLIENT_DIR=%DEPS_DIR%\Microsoft.Trusted.Signing.Client.%TRUSTED_SIGNING_CLIENT_VERSION%
+set AZURE_SIGN_DLIB_PATH=%TRUSTED_SIGNING_CLIENT_DIR%\bin\x64\Azure.CodeSigning.Dlib.dll
+
 
 ::-------------------------------------------------------------------------
 :: Binaries
@@ -49,12 +59,6 @@ set BUNDLED_PYTHON_X64=%BUNDLED_PYTHON_X64_DIR%\python.exe
 call :SetMSBuildPath || goto :Abort
 
 
-::-------------------------------------------------------------------------
-:: Signing certificate
-::-------------------------------------------------------------------------
-set CERT_THUMBPRINT_SHA1=88b278d63d192543884faa8cd97cc77ef74ef897
-
-
 ::-------------------------------------------------------------------------
 :: Begin the installation process
 ::-------------------------------------------------------------------------
@@ -63,9 +67,12 @@ if not exist "%BUILD_STAGE%" mkdir "%BUILD_STAGE%"
 
 call :InstallPython ^
     x64 %PYTHON_X64_DEP% %PYTHON_X64_FILENAME% ^
-    %PYTHON_X64_URL% %PYTHON_X64_MD5% ^
+    %PYTHON_X64_URL% %PYTHON_X64_SHA256% ^
     || goto :Abort
 
+call :InstallNuGet || goto :Abort
+call :InstallTrustedSigningClient || goto :Abort
+call :GenerateSigningMetadata || goto :Abort
 call :CreateBuildDirectory || goto :Abort
 call :InstallPackages || goto :Abort
 call :InstallRBTools || goto :Abort
@@ -80,14 +87,14 @@ exit /B 0
 ::-------------------------------------------------------------------------
 :: Installs Python
 ::-------------------------------------------------------------------------
-:InstallPython arch dep_path python_filename url md5
+:InstallPython arch dep_path python_filename url sha256
 setlocal
 
 set _arch=%~1
 set _dep_path=%~2
 set _python_filename=%~3
 set _url=%~4
-set _md5=%~5
+set _sha256=%~5
 
 echo.
 echo == Installing Python [%_arch%] ==
@@ -99,7 +106,7 @@ if not exist "%_dep_path%" (
     if not exist "%_PYTHON_INSTALLER%" (
         echo Preparing to download Python v%PYTHON_VERSION% [%_arch%]...
 
-        call :DownloadAndVerify %_url% "%_PYTHON_INSTALLER%" %_md5%
+        call :DownloadAndVerify %_url% "%_PYTHON_INSTALLER%" SHA256 %_sha256%
         if %errorlevel% neq 0 exit /b 1
 
         echo Downloaded to %_PYTHON_INSTALLER%
@@ -130,6 +137,158 @@ if not exist "%_dep_path%" (
 exit /B 0
 
 
+::-------------------------------------------------------------------------
+:: Download nuget.exe.
+::
+:: This is needed for part of the Azure Artifact Signing setup.
+::-------------------------------------------------------------------------
+:InstallNuGet
+setlocal
+
+echo.
+echo == Installing NuGet [%NUGET_VERSION%] ==
+
+if not exist "%NUGET_DIR%" mkdir "%NUGET_DIR%"
+
+call :DownloadAndVerify %NUGET_URL% "%NUGET_EXE%" SHA256 %NUGET_SHA256%
+
+if ERRORLEVEL 1 (
+    call :DeleteIfExists "%NUGET_EXE%"
+    exit /B 1
+)
+
+exit /B 0
+
+
+::-------------------------------------------------------------------------
+:: Install the Azure Trusted Signing client.
+::
+:: This installs to the dependency tree so signtool.exe can find it.
+::-------------------------------------------------------------------------
+:InstallTrustedSigningClient
+setlocal
+
+echo.
+echo == Installing Microsoft.Trusted.Signing.Client [%TRUSTED_SIGNING_CLIENT_VERSION%] ==
+
+if not exist "%TRUSTED_SIGNING_CLIENT_DIR%" (
+    "%NUGET_EXE%" install Microsoft.Trusted.Signing.Client ^
+        -Version %TRUSTED_SIGNING_CLIENT_VERSION% ^
+        -OutputDirectory "%DEPS_DIR%" ^
+        -NonInteractive
+    if %errorlevel% neq 0 exit /B 1
+)
+
+if not exist "%AZURE_SIGN_DLIB_PATH%" (
+    echo Could not find the Azure Trusted Signing dlib at:
+    echo %AZURE_SIGN_DLIB_PATH%
+    exit /B 1
+)
+
+exit /B 0
+
+
+::-------------------------------------------------------------------------
+:: Generate the Azure Trusted Signing metadata JSON file.
+::
+:: This will populate the file from environment variables describing the
+:: Artifact Signing account and certificate profile to use. The result will
+:: be passed to signtool.exe in the build stage.
+::-------------------------------------------------------------------------
+:GenerateSigningMetadata
+setlocal
+
+echo.
+echo == Generating Azure Trusted Signing metadata ==
+
+call :TrimTrailingSpaces "%AZURE_TRUSTED_SIGNING_ENDPOINT%" _endpoint
+call :TrimTrailingSpaces "%AZURE_TRUSTED_SIGNING_ACCOUNT%" _account
+call :TrimTrailingSpaces "%AZURE_TRUSTED_SIGNING_CERT_PROFILE%" _cert_profile
+
+if "%_endpoint%" == "" (
+    echo AZURE_TRUSTED_SIGNING_ENDPOINT must be set.
+    exit /B 1
+)
+
+if "%_account%" == "" (
+    echo AZURE_TRUSTED_SIGNING_ACCOUNT must be set.
+    exit /B 1
+)
+
+if "%_cert_profile%" == "" (
+    echo AZURE_TRUSTED_SIGNING_CERT_PROFILE must be set.
+    exit /B 1
+)
+
+set _metadata_file=%DEPS_DIR%\trusted-signing-metadata.json
+
+(
+    echo {
+    echo   "Endpoint": "%_endpoint%",
+    echo   "CodeSigningAccountName": "%_account%",
+    echo   "CertificateProfileName": "%_cert_profile%"
+    echo }
+) > "%_metadata_file%"
+
+endlocal & set AZURE_SIGN_METADATA_FILE=%_metadata_file%
+exit /B 0
+
+
+::-------------------------------------------------------------------------
+:: Get a token for communicating with Azure.
+::
+:: This assumes the build process is running within an EC2 instance. It
+:: will exchange the instance's identity for an Azure AD federated token,
+:: which lets signtool.exe talk to Azure.
+::
+:: The resulting token is good for a period of time, and is considered
+:: sensitive data. It's stored under a non-guessable name in the temp
+:: directory, and should be deleted once done.
+::-------------------------------------------------------------------------
+:GetFederatedToken
+setlocal
+
+echo.
+echo == Requesting an Azure federated token via AWS ==
+
+call :TrimTrailingSpaces "%AZURE_TENANT_ID%" _tenant_id
+call :TrimTrailingSpaces "%AZURE_CLIENT_ID%" _client_id
+
+if "%_tenant_id%" == "" (
+    echo AZURE_TENANT_ID must be set.
+    exit /B 1
+)
+
+if "%_client_id%" == "" (
+    echo AZURE_CLIENT_ID must be set.
+    exit /B 1
+)
+
+where aws >NUL 2>&1
+if %errorlevel% neq 0 (
+    echo The AWS CLI ^(aws.exe^) must be installed and on PATH.
+    exit /B 1
+)
+
+set _token_file=%TEMP%\rbtools-azure-token-%RANDOM%%RANDOM%.jwt
+
+aws sts get-web-identity-token ^
+    --audience "api://AzureADTokenExchange" ^
+    --signing-algorithm RS256 ^
+    --duration-seconds 3600 ^
+    --query WebIdentityToken ^
+    --output text > "%_token_file%"
+
+if %errorlevel% neq 0 (
+    echo Failed to obtain an AWS web identity token.
+    call :DeleteIfExists "%_token_file%"
+    exit /B 1
+)
+
+endlocal & set "AZURE_FEDERATED_TOKEN_FILE=%_token_file%" & set "AZURE_TENANT_ID=%_tenant_id%" & set "AZURE_CLIENT_ID=%_client_id%"
+exit /B 0
+
+
 ::-------------------------------------------------------------------------
 :: Populates the build directory from dependencies
 ::-------------------------------------------------------------------------
@@ -247,9 +406,14 @@ if ERRORLEVEL 1 exit /B 1
 
 set _rbtools_version=%_return1%
 
+:: Fetch the token as late as possible, so nothing can fail and accidentally
+:: leave it sitting around before we get a chance to clean it up.
+call :GetFederatedToken
+if ERRORLEVEL 1 exit /B 1
+
 set _wix_path=%CD%\wix
 set _sln_file=%_wix_path%\rbtools.sln
-set _timestamp_url=http://timestamp.comodoca.com/authenticode
+set _timestamp_url=http://timestamp.acs.microsoft.com
 
 echo.
 echo == Building the RBTools installer [x64] ==
@@ -261,11 +425,16 @@ echo == Building the RBTools installer [x64] ==
     /p:Root="%BUILD_ROOT_X64%" ^
     /p:OutputPath="%BUILD_STAGE%\\" ^
     /p:SourcePath="%_wix_path%" ^
-    /p:CertificateThumbprint=%CERT_THUMBPRINT_SHA1% ^
+    /p:AzureSignDlibPath="%AZURE_SIGN_DLIB_PATH%" ^
+    /p:AzureSignMetadataFile="%AZURE_SIGN_METADATA_FILE%" ^
     /p:TimestampUrl=%_timestamp_url% ^
     "%_sln_file%"
 
-if ERRORLEVEL 1 exit /B 1
+set _msbuild_result=%ERRORLEVEL%
+
+call :DeleteIfExists "%AZURE_FEDERATED_TOKEN_FILE%"
+
+if %_msbuild_result% neq 0 exit /B 1
 
 mkdir "%BUILD_DEST%" 2>&1
 dir "%BUILD_STAGE%" /S
@@ -345,18 +514,19 @@ exit /B 0
 ::-------------------------------------------------------------------------
 :: Downloads and verifies a file from a URL.
 ::-------------------------------------------------------------------------
-:DownloadAndVerify url dest expected_hash
+:DownloadAndVerify url dest algorithm expected_hash
 setlocal
 
 set _url=%~1
 set _dest=%~2
-set _expected_hash=%~3
+set _algorithm=%~3
+set _expected_hash=%~4
 
 if not exist "%_dest%" (
     call :DownloadFile %_url% "%_dest%" || exit /B 1
 )
 
-call :VerifyMD5 "%_dest%" %_expected_hash% || exit /B 1
+call :VerifyHash "%_dest%" %_algorithm% %_expected_hash% || exit /B 1
 
 exit /B 0
 
@@ -380,21 +550,20 @@ exit /B 0
 
 
 ::-------------------------------------------------------------------------
-:: Verifies the MD5 checksum of a file.
+:: Verifies the checksum of a file against a given hash algorithm.
 ::-------------------------------------------------------------------------
-:VerifyMD5 filename expected_hash
+:VerifyHash filename algorithm expected_hash
 setlocal
 
 set _filename=%~1
-set _expected_hash=%~2
+set _algorithm=%~2
+set _expected_hash=%~3
 
-echo Verifying that %_filename% has MD5 hash %_expected_hash%...
+echo Verifying that %_filename% has %_algorithm% hash %_expected_hash%...
 
 PowerShell -NoProfile -Command ^
- "$md5 = New-Object Security.Cryptography.MD5CryptoServiceProvider;"^
- "$file = [System.IO.File]::ReadAllBytes('%_filename%');"^
- "$hash = [System.BitConverter]::ToString($md5.ComputeHash($file));"^
- "$hash = $hash.toLower().Replace('-', '');"^
+ "$hash = (Get-FileHash -Path '%_filename%' -Algorithm %_algorithm%).Hash;"^
+ "$hash = $hash.ToLower();"^
  "if ($hash -eq '%_expected_hash%') {"^
  "    Write-Host '%_filename% has a valid hash.';"^
  "    exit 0;"^
@@ -408,6 +577,29 @@ echo Hash verified.
 exit /B 0
 
 
+::-------------------------------------------------------------------------
+:: Trims trailing spaces from a value.
+::
+:: This is used with environment variables to strip any trailing spaces.
+:: This can happen pretty easily, since `set A=B && set C=D` will set
+:: `A="B "`, and Azure can't handle this.
+::-------------------------------------------------------------------------
+:TrimTrailingSpaces value varname
+setlocal EnableDelayedExpansion
+
+set "_str=%~1"
+
+:TrimTrailingSpacesLoop
+
+if defined _str if "!_str:~-1!" == " " (
+    set "_str=!_str:~0,-1!"
+    goto :TrimTrailingSpacesLoop
+)
+
+endlocal & set "%~2=%_str%"
+exit /B 0
+
+
 ::-------------------------------------------------------------------------
 :: Deletes a file or directory if it exists.
 ::-------------------------------------------------------------------------