keb/lazysecrets
1
0 Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases 5 Wiki Activity
10 Commits 1 Branch 5 Tags
3913989cd174c2630f9c7f4df1eb13b91e3ba68b
Commit Graph
4 Commits
Author SHA1 Message Date
kebandClaude Opus 5.5 3913989cd1 feat: tenant name and tenant ID on lines of their own
CI / Checks (pull_request) Successful in 24s
Details
PR title / Conventional title (pull_request) Successful in 1s
Details 
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
 2026-10-11 10:27:19 +02:00
kebandClaude Opus 5.5 1543e992bb fix: lower-case Graph errors (staticcheck)
CI / Checks (pull_request) Successful in 24s
Details
PR title / Conventional title (pull_request) Successful in 2s
Details 
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
 2026-10-11 10:17:54 +02:00
kebandClaude Opus 5.5 b37caa5a25 feat: an account pane on Azure account rows: fields and groups to move through and copy
CI / Checks (pull_request) Failing after 11s
Details
PR title / Conventional title (pull_request) Successful in 2s
Details 
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
 2026-10-11 10:17:22 +02:00
keb 52b6257dd5 feat: show who an Azure account signs in as, in Details on its row (#5) 
On an Azure account's group row, the Details pane now describes the account:

| field | from |
|---|---|
| name | token `name` |
| user (and "service principal") | az's account list |
| tenant: name · ID | az's account list (the name is borrowed from another entry in the same tenant when az left it out) |
| object ID | token `oid`; `y` on the row copies it |
| sign-in: MFA or not, and how | token `amr` |
| directory roles | token `wids`: built-in roles by name, others as `role 1a2b3c4d`, the default member role left out |
| subs: count · default | az's account list |
| cloud | az's account list, when not AzureCloud |

Nothing is fetched for it: the claims are the ones from the token lazysecrets already gets for the account's own tenant, read without verification. The token itself is never stored or shown. Before the first token, only the az-list fields show. A failing account shows its sign-in problem there instead (from #4).

New optional `provider.Accounts` interface; `azure.Provider` implements it. Tests: the fields from claims and az's list, sign-in methods, the UI showing it on the group row only, and `y` copying the object ID. Checked against a real signed-in account (name, MFA · password, default subscription) and an expired one (az-list fields only, since there's no token).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com>
Reviewed-on: #5
 2026-10-11 10:09:17 +02:00