rigg 1.2.2

Configuration-as-code CLI for Azure AI Search and Microsoft Foundry
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128

//! Authentication management commands

use anyhow::Result;

use rigg_client::auth::{AzCliAuth, EnvAuth};

use crate::cli::AuthCommands;
use crate::commands::GlobalContext;

pub async fn run(ctx: &GlobalContext, cmd: AuthCommands) -> Result<()> {
    match cmd {
        AuthCommands::Login {
            service_principal,
            identity,
        } => login(service_principal, identity).await,
        AuthCommands::Status => status().await,
        AuthCommands::Logout => logout().await,
        AuthCommands::Doctor { fix } => crate::commands::doctor::run(ctx, fix).await,
    }
}

async fn login(service_principal: bool, identity: bool) -> Result<()> {
    if service_principal {
        println!("Service principal authentication:");
        println!();
        println!("Set the following environment variables:");
        println!("  export AZURE_CLIENT_ID=<app-id>");
        println!("  export AZURE_CLIENT_SECRET=<secret>");
        println!("  export AZURE_TENANT_ID=<tenant-id>");
        println!();
        println!("Then run 'rigg auth status' to verify.");
        return Ok(());
    }

    if identity {
        println!("Managed identity authentication is used automatically when running in Azure.");
        println!("No login required.");
        return Ok(());
    }

    // Default: Azure CLI login
    println!("Opening browser for Azure CLI login...");
    println!();

    let status = std::process::Command::new("az").args(["login"]).status()?;

    if status.success() {
        println!();
        println!("Login successful! Run 'rigg auth status' to verify.");
    } else {
        anyhow::bail!("Azure CLI login failed");
    }

    Ok(())
}

async fn status() -> Result<()> {
    println!("Authentication Status");
    println!("=====================");
    println!();

    // Check environment variables
    if EnvAuth::is_configured() {
        println!("Environment Variables: Configured");
        println!("  AZURE_CLIENT_ID: set");
        println!("  AZURE_CLIENT_SECRET: set");
        println!("  AZURE_TENANT_ID: set");
    } else {
        println!("Environment Variables: Not configured");
    }

    println!();

    // Check Azure CLI
    match AzCliAuth::check_status() {
        Ok(status) => {
            println!("Azure CLI: Logged in");
            if let Some(user) = status.user {
                println!("  User: {}", user);
            }
            if let Some(sub) = status.subscription {
                println!("  Subscription: {}", sub);
            }
            if let Some(sub_id) = status.subscription_id {
                println!("  Subscription ID: {}", sub_id);
            }
        }
        Err(e) => {
            println!("Azure CLI: {}", e);
        }
    }

    println!();

    // Test token acquisition
    println!("Token Test:");
    match rigg_client::auth::get_auth_provider() {
        Ok(provider) => {
            println!("  Using: {}", provider.method_name());
            match provider.get_token() {
                Ok(_) => println!("  Status: Token acquired successfully"),
                Err(e) => println!("  Status: Failed - {}", e),
            }
        }
        Err(e) => {
            println!("  Status: No authentication available - {}", e);
        }
    }

    Ok(())
}

async fn logout() -> Result<()> {
    println!("Logging out of Azure CLI...");

    let status = std::process::Command::new("az").args(["logout"]).status()?;

    if status.success() {
        println!("Logged out successfully.");
        println!();
        println!("Note: Environment variables (AZURE_CLIENT_ID, etc.) are not cleared.");
        println!("Unset them manually if needed.");
    } else {
        anyhow::bail!("Azure CLI logout failed");
    }

    Ok(())
}