Service Principal Authentication

[maseba]

Is possibile to use this library to authenticate a Service Principal with client_id and client_secret? I'm looking for a solution to authenticate a CI/CD service without a personal access token.

[alsastre]

Sebastiano Maesano (@maseba) Did it work for you or did you find an alternative?

[alsastre]

Found the way to use a service principal.
There is no need to use this library (although I assume it would also work).

Steps:

# Login with the SP and get token in base64
APP_ID=XXXXXXX
CLIENT_SECRET=XXXXXXX
TENANT_ID=XXXXXXX
az login --service-principal -u $APP_ID -p $CLIENT_SECRET --tenant $TENANT_ID --allow-no-subscriptions
PAT=$(az account get-access-token -resource 499b84ac-1321-427f-aa17-267ca6975798 --query "accessToken" -o tsv)
ENCODED=$(echo -n $PAT | base64 -w 0)

# Create  npmrc with the configuration
ORG="ORG"
PROJECT="PROJECT"
FEED="FEED"
echo -n "registry=https://pkgs.dev.azure.com/$ORG/$PROJECT/_packaging/$FEED/npm/registry/
always-auth=true
; begin auth token
//pkgs.dev.azure.com/$ORG/$PROJECT/_packaging/$FEED/npm/registry/:username=$PROJECT
//pkgs.dev.azure.com/$ORG/$PROJECT/_packaging/$FEED/npm/registry/:_password=${ENCODED}
//pkgs.dev.azure.com/$ORG/$PROJECT/_packaging/$FEED/npm/registry/:email=npm requires email to be set but doesn't use the value
//pkgs.dev.azure.com/$ORG/$PROJECT/_packaging/$FEED/npm/:username=$PROJECT
//pkgs.dev.azure.com/$ORG/$PROJECT/_packaging/$FEED/npm/:_password=${ENCODED}
//pkgs.dev.azure.com/$ORG/$PROJECT/_packaging/$FEED/npm/:email=npm requires email to be set but doesn't use the value
; end auth token
" | envsubst > .npmrc


echo "Ready to use for npm"
npm install package