Closes #903 Retire DefaultAzureCredential phase 1 (awareness)

.changes/unreleased/optimization-20260325-161506.yaml

@@ -0,0 +1,8 @@
+kind: optimization
+body: Add deprecation warning for `DefaultAzureCredential` fallback with migration guidance to explicit `token_credential` parameter
+time: 2026-03-25T16:15:06.677907+02:00
+custom:
+    Author: shirasassoon
+    AuthorLink: https://github.com/shirasassoon
+    Issue: "903"
+    IssueLink: https://github.com/microsoft/fabric-cicd/issues/903

devtools/debug_api.py

@@ -3,7 +3,7 @@
 
 # The following is intended for developers of fabric-cicd to debug and call Fabric REST APIs locally from the github repo
 
-from azure.identity import ClientSecretCredential, DefaultAzureCredential
+from azure.identity import AzureCliCredential, AzurePowerShellCredential, ClientSecretCredential
 
 from fabric_cicd import change_log_level, constants
 from fabric_cicd._common._fabric_endpoint import FabricEndpoint
@@ -13,20 +13,21 @@
 # change_log_level()
 
 if __name__ == "__main__":
-    # Replace None correct value when using SPN auth
+    # Azure CLI auth - comment out to use a different auth method
+    token_credential = AzureCliCredential()
+
+    # Uncomment to use PowerShell auth
+    # token_credential = AzurePowerShellCredential()
+
+    # Uncomment to use SPN auth
     # client_id = "your-client-id"
     # client_secret = "your-client-secret"
     # tenant_id = "your-tenant-id"
-    token_credential = (
-        None  # ClientSecretCredential(client_id=client_id, client_secret=client_secret, tenant_id=tenant_id)
-    )
+    # token_credential = ClientSecretCredential(client_id=client_id, client_secret=client_secret, tenant_id=tenant_id)
 
     # Create endpoint object
-    fe = FabricEndpoint(  # if credential is not defined, use DefaultAzureCredential
-        token_credential=(
-            DefaultAzureCredential() if token_credential is None else validate_token_credential(token_credential)
-        )
-    )
+    fe = FabricEndpoint(token_credential=validate_token_credential(token_credential))
+
     # Set workspace id variable if needed in API url
     workspace_id = "8f5c0cec-a8ea-48cd-9da4-871dc2642f4c"
 

devtools/debug_local config.py

@@ -6,7 +6,7 @@
 import sys
 from pathlib import Path
 
-from azure.identity import ClientSecretCredential
+from azure.identity import AzureCliCredential, AzurePowerShellCredential, ClientSecretCredential
 
 root_directory = Path(__file__).resolve().parent.parent
 sys.path.insert(0, str(root_directory / "src"))
@@ -19,6 +19,12 @@
 # In this example, the config file sits within the root/sample/workspace directory
 config_file = str(root_directory / "sample" / "workspace" / "config.yml")
 
+# Azure CLI auth - comment out to use a different auth method
+token_credential = AzureCliCredential()
+
+# Uncomment to use PowerShell auth
+# token_credential = AzurePowerShellCredential()
+
 # Uncomment to use SPN auth
 # client_id = "your-client-id"
 # client_secret = "your-client-secret"
@@ -31,8 +37,8 @@
     config_file_path=config_file,
     # Comment out if environment is not needed
     environment="dev",
-    # Uncomment to use SPN auth
-    # token_credential=token_credential,
+    # Explicit token credential required for auth (choose one of the options above)
+    token_credential=token_credential,
     # Uncomment to override specific config values (pass in a dictionary of override values)
     # config_override=config_override_dict
 )

devtools/debug_local.py

@@ -6,7 +6,7 @@
 import sys
 from pathlib import Path
 
-from azure.identity import ClientSecretCredential
+from azure.identity import AzureCliCredential, AzurePowerShellCredential, ClientSecretCredential
 
 root_directory = Path(__file__).resolve().parent.parent
 sys.path.insert(0, str(root_directory / "src"))
@@ -51,6 +51,12 @@
     "SparkJobDefinition",
 ]
 
+# Azure CLI auth - comment out to use a different auth method
+token_credential = AzureCliCredential()
+
+# Uncomment to use PowerShell auth
+# token_credential = AzurePowerShellCredential()
+
 # Uncomment to use SPN auth
 # client_id = "your-client-id"
 # client_secret = "your-client-secret"
@@ -65,8 +71,8 @@
     environment=environment,
     repository_directory=repository_directory,
     item_type_in_scope=item_type_in_scope,
-    # Uncomment to use SPN auth
-    # token_credential=token_credential,
+    # Explicit token credential required for auth (choose one of the options above)
+    token_credential=token_credential,
 )
 
 # Uncomment to publish

devtools/debug_trace_deployment.py

@@ -9,6 +9,8 @@
 import sys
 from pathlib import Path
 
+from azure.identity import AzureCliCredential
+
 root_directory = Path(__file__).resolve().parent.parent
 sys.path.insert(0, str(root_directory / "src"))
 
@@ -27,7 +29,6 @@ def main():
         raise ValueError(msg)
 
     environment = "PPE"
-
     repository_directory = str(root_directory / "sample" / "workspace")
     item_type_in_scope = [
         "Dataflow",
@@ -49,13 +50,15 @@ def main():
         "VariableLibrary",
         "Warehouse",
     ]
+    token_credential = AzureCliCredential()
     for flag in ["enable_shortcut_publish", "continue_on_shortcut_failure"]:
         fabric_cicd.append_feature_flag(flag)
     target_workspace = fabric_cicd.FabricWorkspace(
         workspace_id=workspace_id,
         environment=environment,
         repository_directory=str(repository_directory),
         item_type_in_scope=item_type_in_scope,
+        token_credential=token_credential,
     )
     fabric_cicd.publish_all_items(target_workspace)