Review tools using tenant ID use it to create TokenCredential
Open
engineering item
needs-team-attention
server-Azure.Mcp
tools-Authentication
- Dominant language
- C#
- Stars
- 3.7k
- Forks
- 624
- Avg merge
- 2d 20h
- Merged PRs (30d)
- 220
Description
Review all tools that authenticate with per-request `TokenCredential`s pass tenant ID when it is passed to ensure they're creating credentials for the tenant they'll be requesting against. If this isn't don't the request could fail due to the credential being used not having access to the tenant the request is made against.
Should also think about hiding the API which doesn't take tenant ID to enforce this.
Contributor guide
Assessment
This issue has not been assessed yet.