Skip to content

add DeviceCodeCredential support for CLI Usage.#1908

Draft
g2vinay wants to merge 1 commit intomicrosoft:mainfrom
g2vinay:feature/device-code-auth
Draft

add DeviceCodeCredential support for CLI Usage.#1908
g2vinay wants to merge 1 commit intomicrosoft:mainfrom
g2vinay:feature/device-code-auth

Conversation

@g2vinay
Copy link
Contributor

@g2vinay g2vinay commented Mar 3, 2026

No description provided.

- Add DeviceCodeCredential as a named opt-in: set AZURE_TOKEN_CREDENTIALS=DeviceCodeCredential
  to enable device code flow for headless environments (Docker, WSL, SSH, CI)
- Add AddDeviceCodeCredential() helper following the same pattern as all other
  Add*Credential() methods: respects AZURE_MCP_CLIENT_ID, TokenCachePersistenceOptions,
  CloudConfiguration.AuthorityHost, and AZURE_MCP_AUTHENTICATION_RECORD for token cache reuse
- Add ActiveTransport static property to CustomChainedCredential; set by ServiceStartCommand
  before the credential chain is first built
- Guard DeviceCodeCredential activation: throws CredentialUnavailableException when
  ActiveTransport is non-empty (stdio or http server mode) because stdout is a protocol
  pipe in stdio mode and there is no attached user terminal in http mode
- Update XML doc comments to document the new credential option and update the
  'not added' browser fallback section
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Untriaged

Development

Successfully merging this pull request may close these issues.

1 participant