1.7.0b2 (2021-07-08)
Features Added
InteractiveBrowserCredential
keyword argumentlogin_hint
enables
pre-filling the username/email address field on the login page
(#19225)AzureApplicationCredential
, a default credential chain for applications
deployed to Azure
(#19309)
Bugs Fixed
azure.identity.aio.ManagedIdentityCredential
is an async context manager
that closes its underlying transport session at the end of awith
block
Other Changes
- Most credentials can use tenant ID values returned from authentication
challenges, enabling them to request tokens from the correct tenant. This
behavior is optional and controlled by a new keyword argument,
allow_multitenant_authentication
.
(#19300)- When
allow_multitenant_authentication
is False, which is the default, a
credential will raiseClientAuthenticationError
when its configured tenant
doesn't match the tenant specified for a token request. This may be a
different exception than was raised by prior versions of the credential. To
maintain the prior behavior, set environment variable
AZURE_IDENTITY_ENABLE_LEGACY_TENANT_SELECTION to "True".
- When
CertificateCredential
andClientSecretCredential
support regional STS
on Azure VMs by either keyword argumentregional_authority
or environment
variableAZURE_REGIONAL_AUTHORITY_NAME
. Seeazure.identity.RegionalAuthority
for possible values.
(#19301)- Upgraded minimum
azure-core
version to 1.11.0 and minimummsal
version to
1.12.0 - After IMDS authentication fails,
ManagedIdentityCredential
raises consistent
error messages and usesraise from
to propagate inner exceptions
(#19423)