cloud_terrastodon_credentials 0.34.0

Helpers for getting Azure PAT and stuff for Cloud Terrastodon
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37

use crate::AzureClaims;
use crate::azure_access_token::AZURE_DEVOPS_RESOURCE_ID;
use cloud_terrastodon_azure_types::prelude::AccessToken;
use cloud_terrastodon_command::CommandBuilder;
use cloud_terrastodon_command::CommandKind;
use jsonwebtoken::DecodingKey;
use jsonwebtoken::Validation;

pub async fn get_azure_access_token_jwt() -> eyre::Result<()> {
    let mut cmd = CommandBuilder::new(CommandKind::AzureCLI);
    cmd.args(["account", "get-access-token"]);
    let access_token: AccessToken<String> = cmd.run().await?;
    let mut validation = Validation::default();
    #[expect(deprecated)]
    validation.insecure_disable_signature_validation();
    validation.set_audience(&[
        "https://management.core.windows.net/",
        AZURE_DEVOPS_RESOURCE_ID,
    ]);
    let decoding_key = DecodingKey::from_rsa_raw_components(&[], &[]);
    let token_data = jsonwebtoken::decode::<AzureClaims>(
        &access_token.access_token,
        &decoding_key,
        &validation,
    )?;
    println!("{:#?}", token_data);
    Ok(())
}

#[cfg(test)]
mod test {
    #[tokio::test]
    pub async fn it_works() -> eyre::Result<()> {
        super::get_azure_access_token_jwt().await?;
        Ok(())
    }
}