coleheflin opened a new pull request, #74203: URL: https://github.com/apache/airflow/pull/74203
Add default Azure identity authentication to the Analysis Services hook when both connection login and password are empty. This is the small follow-up suggested in https://github.com/apache/airflow/pull/65879#pullrequestreview-5403757882 after the original feature was merged in #71350. Use `get_async_default_azure_credential` because the merged hook is asynchronous. Preserve explicit client-secret authentication and validation of incomplete credentials. Expose the standard managed/workload identity connection fields and document the authentication choices and authorization requirements. Add tests for credential caching, token scope, asynchronous cleanup, identity extras allowlisting, and client-secret precedence. Validation: - Ruff formatting/lint and non-Docker pre-commit checks passed. - `uvx --from uv==0.11.29 uv lock` completed with no lockfile changes. - Attempted the hook unit tests, provider YAML validation, and manual provider mypy check; all are blocked locally because Docker is not installed. The Docker-dependent provider YAML hook was skipped when committing. - Ran `breeze verify`; its recommended tests and documentation builds also require Docker and remain unverified. Keep this PR in draft until CI validation completes. Related: #65879, #71350. --- ##### Was generative AI tooling used to co-author this PR? - [X] Yes — Pi (gpt-6-astra) Generated-by: Pi (gpt-6-astra) following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
