microsoft / microsoft/azure-devops-go-api

Authenticate using Bearer token

Open
#101 0 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
223
Forks
92
PR merge metrics
No merged PRs in 30d

Description

Hi,

We are using this library through the terraform provider for provisioning Azure DevOps resources as part of our Infrastructure as Code approach. Essentially to provision service connections and variable groups.

In this context, pipelines are run in Azure DevOps that trigger terraform templates which in turn needs to authenticate to Azure DevOps.

It would be a great security and maintainability improvement if we could use OAuth token rather than PAT to authenticate.

Regards,

Laurent Sibilla

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start at the Go API authentication entry point used by the Terraform provider for service connections and variable groups. Review how pipeline-triggered Terraform runs currently supply PAT credentials, then compare the required Azure DevOps OAuth bearer-token flow. Done means those operations can authenticate with an OAuth token instead of a PAT.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, go, terraform
Domain
api, authentication, cloud
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.