Azure / Azure/azure-cli

Enable token encryption when running on Linux

Open
#23,495 4 comments 1 reaction 1 assignee Claimed by @jiasli View on GitHub
Account act-identity-squad Auto-Assign Azure CLI Team customer-reported Feature Candidate feature-request OKR Candidate
Dominant language
Python
Stars
4.6k
Forks
3.5k
Avg merge
3d 2h
Merged PRs (30d)
60

Description

**Related command**

az login

**Is your feature request related to a problem? Please describe.**

Azure CLI has not yet enable token encryption when running on Linux even when MSAL now has implemented support for this.

**Describe the solution you'd like**

Azure CLI should store the token cache encrypted instead if plaintext on Linux

**Describe alternatives you've considered**

The current solution is to depend on file permissions 600 set the by CLI on the token cache file. However, encrypting it as well will improve the security posture.

**Additional context**

This is essentially the follow up on thread [https://github.com/AzureAD/microsoft-authentication-extensions-for-python/issues/106](https://github.com/AzureAD/microsoft-authentication-extensions-for-python/issues/106)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.