Package com.microsoft.jenkins.azuread.scribe

Class AzureWorkloadIdentityApi

java.lang.Object
com.github.scribejava.core.builder.api.DefaultApi20
com.github.scribejava.apis.microsoftazureactivedirectory.BaseMicrosoftAzureActiveDirectoryApi
com.github.scribejava.apis.MicrosoftAzureActiveDirectory20Api
com.microsoft.jenkins.azuread.scribe.AzureAdApi
com.microsoft.jenkins.azuread.scribe.AzureWorkloadIdentityApi
public class AzureWorkloadIdentityApi extends AzureAdApi
Custom ScribeJava API for Workload Identity Federation.

When authenticating to Entra ID, this class replaces the normal client_secret parameter with a client_assertion and client_assertion_type. The federated token (read from AZURE_FEDERATED_TOKEN_FILE) is sent as a signed JWT client assertion.

  • Field Summary

    Fields inherited from class com.github.scribejava.apis.microsoftazureactivedirectory.BaseMicrosoftAzureActiveDirectoryApi

    COMMON_TENANT

  • Method Summary

    Modifier and Type
    Method
    Description
    static AzureWorkloadIdentityApi
    custom(String tenant, String authorityHost)
     
    com.github.scribejava.core.oauth2.clientauthentication.ClientAuthentication
    getClientAuthentication()
     

    Methods inherited from class com.microsoft.jenkins.azuread.scribe.AzureAdApi

    getAccessTokenEndpoint, getAuthorizationBaseUrl, getLogoutUrl

    Methods inherited from class com.github.scribejava.apis.MicrosoftAzureActiveDirectory20Api

    custom, getBearerSignature, getEndpointVersionPath, instance

    Methods inherited from class com.github.scribejava.core.builder.api.DefaultApi20

    createService, getAccessTokenExtractor, getAccessTokenVerb, getAuthorizationUrl, getDeviceAuthorizationEndpoint, getDeviceAuthorizationExtractor, getRefreshTokenEndpoint, getRevokeTokenEndpoint

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Method Details

    • custom

      public static AzureWorkloadIdentityApi custom(String tenant, String authorityHost)

    • getClientAuthentication

      public com.github.scribejava.core.oauth2.clientauthentication.ClientAuthentication getClientAuthentication()
      Overrides:
      getClientAuthentication in class com.github.scribejava.apis.microsoftazureactivedirectory.BaseMicrosoftAzureActiveDirectoryApi