Merged
Conversation
Member
pvaneck
commented
Feb 11, 2026
- Update changelog + version.
- Readd token binding feature that was removed in [Identity] Prepare release #45112.
Signed-off-by: Paul Van Eck <paulvaneck@microsoft.com>
Contributor
There was a problem hiding this comment.
Pull request overview
Prepares azure-identity for the 1.26.0b2 beta release and reintroduces WorkloadIdentityCredential’s AKS identity binding (token proxy) support, including new transports and expanded test coverage.
Changes:
- Re-add token proxy support to
WorkloadIdentityCredential(sync + async) via new token-binding transport implementations. - Add extensive unit/integration tests covering proxy endpoint rewriting, SNI, and CA rotation handling.
- Update release metadata/docs: bump version + changelog entry + troubleshooting guidance.
Reviewed changes
Copilot reviewed 13 out of 13 changed files in this pull request and generated 9 comments.
Show a summary per file
| File | Description |
|---|---|
| sdk/identity/azure-identity/tests/test_workload_identity_credential_async.py | Adds async tests for token proxy transports, SNI/CA handling, and local-server integration coverage. |
| sdk/identity/azure-identity/tests/test_workload_identity_credential.py | Adds sync tests for token proxy transports and local-server integration coverage. |
| sdk/identity/azure-identity/pyproject.toml | Updates package classifier for the beta release. |
| sdk/identity/azure-identity/azure/identity/aio/_internal/token_binding_transport_asyncio.py | Adds async fallback transport based on AsyncioRequestsTransport. |
| sdk/identity/azure-identity/azure/identity/aio/_internal/token_binding_transport_aiohttp.py | Adds aiohttp-based custom transport with SNI + CA support. |
| sdk/identity/azure-identity/azure/identity/aio/_credentials/workload_identity.py | Wires enable_azure_proxy into async WorkloadIdentityCredential and adds transport selection logic. |
| sdk/identity/azure-identity/azure/identity/_version.py | Bumps version to 1.26.0b2. |
| sdk/identity/azure-identity/azure/identity/_internal/token_binding_transport_requests.py | Adds sync requests-based custom transport with SNI + CA support. |
| sdk/identity/azure-identity/azure/identity/_internal/token_binding_transport_mixin.py | Adds shared mixin for proxy URL rewriting + CA file tracking/validation. |
| sdk/identity/azure-identity/azure/identity/_credentials/workload_identity.py | Wires enable_azure_proxy into sync WorkloadIdentityCredential and adds transport creation helper. |
| sdk/identity/azure-identity/azure/identity/_constants.py | Adds new environment variable names for token proxy configuration. |
| sdk/identity/azure-identity/TROUBLESHOOTING.md | Adds troubleshooting entry for identity binding mode errors and mitigation. |
| sdk/identity/azure-identity/CHANGELOG.md | Adds 1.26.0b2 changelog entry documenting the breaking rename. |
sdk/identity/azure-identity/azure/identity/aio/_internal/token_binding_transport_asyncio.py
Show resolved
Hide resolved
sdk/identity/azure-identity/tests/test_workload_identity_credential_async.py
Show resolved
Hide resolved
sdk/identity/azure-identity/tests/test_workload_identity_credential_async.py
Show resolved
Hide resolved
sdk/identity/azure-identity/azure/identity/_internal/token_binding_transport_mixin.py
Show resolved
Hide resolved
sdk/identity/azure-identity/azure/identity/_internal/token_binding_transport_mixin.py
Show resolved
Hide resolved
sdk/identity/azure-identity/azure/identity/_internal/token_binding_transport_requests.py
Show resolved
Hide resolved
sdk/identity/azure-identity/azure/identity/_internal/token_binding_transport_requests.py
Show resolved
Hide resolved
sdk/identity/azure-identity/azure/identity/aio/_internal/token_binding_transport_asyncio.py
Show resolved
Hide resolved
xiangyan99
approved these changes
Feb 12, 2026
Member
Author
|
/check-enforcer override |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.