feat: show who an Azure account signs in as, in Details on its row #5

2026-10-11T10:08:05+02:00

keb commented

2026-10-11 10:08:05 +02:00

On an Azure account's group row, the Details pane now describes the account:

field	from
name	token `name`
user (and "service principal")	az's account list
tenant: name · ID	az's account list (the name is borrowed from another entry in the same tenant when az left it out)
object ID	token `oid`; `y` on the row copies it
sign-in: MFA or not, and how	token `amr`
directory roles	token `wids`: built-in roles by name, others as `role 1a2b3c4d`, the default member role left out
subs: count · default	az's account list
cloud	az's account list, when not AzureCloud

Nothing is fetched for it: the claims are the ones from the token lazysecrets already gets for the account's own tenant, read without verification. The token itself is never stored or shown. Before the first token, only the az-list fields show. A failing account shows its sign-in problem there instead (from #4).

New optional provider.Accounts interface; azure.Provider implements it. Tests: the fields from claims and az's list, sign-in methods, the UI showing it on the group row only, and y copying the object ID. Checked against a real signed-in account (name, MFA · password, default subscription) and an expired one (az-list fields only, since there's no token).

🤖 Generated with Claude Code

On an Azure account's group row, the Details pane now describes the account: | field | from | |---|---| | name | token `name` | | user (and "service principal") | az's account list | | tenant: name · ID | az's account list (the name is borrowed from another entry in the same tenant when az left it out) | | object ID | token `oid`; `y` on the row copies it | | sign-in: MFA or not, and how | token `amr` | | directory roles | token `wids`: built-in roles by name, others as `role 1a2b3c4d`, the default member role left out | | subs: count · default | az's account list | | cloud | az's account list, when not AzureCloud | Nothing is fetched for it: the claims are the ones from the token lazysecrets already gets for the account's own tenant, read without verification. The token itself is never stored or shown. Before the first token, only the az-list fields show. A failing account shows its sign-in problem there instead (from #4). New optional `provider.Accounts` interface; `azure.Provider` implements it. Tests: the fields from claims and az's list, sign-in methods, the UI showing it on the group row only, and `y` copying the object ID. Checked against a real signed-in account (name, MFA · password, default subscription) and an expired one (az-list fields only, since there's no token). 🤖 Generated with [Claude Code](https://claude.com/claude-code)

keb added 3 commits 2026-10-11 10:08:05 +02:00

wip: account details from az and the token 482e0805b7

Merge remote-tracking branch 'origin/main' into feat/account-details 5355c65284

feat: show who an Azure account signs in as, in Details on its row

CI / Checks (pull_request) Successful in 24s

Details

PR title / Conventional title (pull_request) Successful in 2s

Details

2e941102a2

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

keb merged commit 52b6257dd5 into main

2026-10-11 10:09:17 +02:00

keb deleted branch feat/account-details

2026-10-11 10:09:17 +02:00

keb referenced this pull request

2026-10-11 10:17:23 +02:00

feat: a Fields pane for anything but a secret, first for Azure accounts: fields and groups to move through, filter and copy #7

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: keb/lazysecrets#5